CVE-2026-20581
Quick assessment
Affected
MediaTek, Inc. MediaTek chipset
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 USB 驱动中存在因释放后使用（Use-After-Free）缺陷而导致的潜在内存破坏问题。若恶意攻击者已获取系统权限，该漏洞可能被利用以实现本地权限提升。利用此漏洞无需用户交互。补丁 ID：ALPS11411985；问题 ID：MSV-9750。
Possible ATT&CK Techniques 1 AI
T1548.001 · Setuid and Setgid
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-20581
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT6858 | - |
|
II. Public POCs for CVE-2026-20581
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20581
请登录查看更多情报信息。
Other References for CVE-2026-20581 (1)
Same Patch Batch · MediaTek, Inc. · 2026-11-02 · 56 CVEs total
| CVE-2026-20561 | Modem 越界写入漏洞：远程拒绝服务，无需交互 | |
| CVE-2026-20545 | Modem 越界写入漏洞致远程提权 | |
| CVE-2026-20550 | GNSS 越界写入漏洞，需用户交互，致拒绝服务 | |
| CVE-2026-20547 | Modem 越界写漏洞：远程提权（补丁 MOLY01874018） | |
| CVE-2026-20548 | Modem 越界写入漏洞：远程提权，无需交互 | |
| CVE-2026-20549 | Modem 越界写入漏洞：远程提权 | |
| CVE-2026-20546 | Modem 越界写入漏洞：远程提权 | |
| CVE-2026-20558 | GPU pdma 存在因释放后使用导致的权限提升漏洞 | |
| CVE-2026-20559 | GPU pdma 内存破坏漏洞：用后释放导致提权 | |
| CVE-2026-20560 | Modem 版本 MOLY01870543 远程拒绝服务漏洞 | |
| CVE-2026-20557 | Modem 越界写入漏洞：远程提权 | |
| CVE-2026-20562 | Modem 越界写入漏洞：远程拒绝服务（MSV-8907） | |
| CVE-2026-20563 | Modem 越界写入漏洞：远程拒绝服务 | |
| CVE-2026-20564 | Modem 越界写入漏洞，导致拒绝服务 | |
| CVE-2026-20565 | Modem 越界写入漏洞：权限提升风险 | |
| CVE-2026-20566 | Modem 越界写入漏洞：远程拒绝服务，需系统权限 | |
| CVE-2026-20567 | afe 越界写入漏洞：特权升级，无需交互 | |
| CVE-2026-20568 | afe 存在释放后使用漏洞，可致系统崩溃及提权 | |
| CVE-2026-20569 | adsp 中因释放后使用导致内存破坏及权限提升漏洞 | |
| CVE-2026-20570 | adsp 存在 UAF 漏洞，可导致本地权限提升 |
Showing top 20 of 56 CVEs. View all on vendor page → →