CVE-2026-20583

Description

In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9747.

References

https://www.mediatek.com/product-security-bulletin/November-2026

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115047

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3