Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-20583 EUVD-2026-115047GHSA-vfpx-hmr8-rvqf

In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already…

Published Nov 2, 2026 · Updated Nov 2, 2026 · Assigned by MediaTek

Description

In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6739, MT6761, MT6765, MT6768, MT6769, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6858, MT6877, MT6878, MT6879, MT6881, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8188, MT8189, MT8196, MT8668, MT8768, MT8786 —

References