{"id":"CVE-2026-20531","published":"2026-10-05T02:16:51.907","lastModified":"2026-10-06T15:05:34.080","description":"In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://www.mediatek.com/product-security-bulletin/October-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw in apu allows for memory corruption due to use after free, potentially leading to local privilege escalation with no additional execution privileges required.","exploitability":"Exploitation is relatively straightforward with no user interaction needed, making it a high-risk vulnerability.","blast_radius":"If exploited, this could result in full control over the affected system, allowing for extensive damage or unauthorized access.","remediation":"Upgrade to the fixed version 2.590 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","memory-corruption","local-exploit","patch-available"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:45:21.593Z"}}