Use After Free in Mediatek, Inc. Mediatek Chipset
CVE-2026-20581
In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750.
Vulnerability class: Use-After-Free
Published .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Mediatek, Inc. Mediatek Chipset — versions MT6858, MT6881, MT6993