CVE-2026-20542 — MediaTek, Inc. / MediaTek chipset

Description (CNA)

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MediaTek chipset	affected MT2718; affected MT6878; affected MT6897; affected MT6899; affected MT6989; affected MT6991; affected MT8171; affected MT8188; affected MT8189; affected MT8196; affected MT8370; affected MT8371; affected MT8390; affected MT8391; affected MT8395; affected MT8678; affected MT8792; affected MT8793; affected MT8796

CWE

CWE-416

References

https://www.mediatek.com/product-security-bulletin/October-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.