Privilege Escalation Vulnerability in MediaTek GPU Products

CVE-2026-20591

What is CVE-2026-20591?

A vulnerability exists in MediaTek GPU products due to a missing permission check in the pdma component, which could allow attackers to escalate privileges locally without needing additional execution privileges. This exploitation does not require user interaction, making it particularly concerning for system security. The issue is documented under Patch ID: ALPS11365075 and Issue ID: MSV-9546, highlighting the need for immediate remediation.

References