# CVE-2026-20558: CVE-2026-20558

Status: published. Published: 2026-11-02. Updated: 2026-11-02.

In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365070; Issue ID: MSV-9547.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- MediaTek, Inc. / MediaTek chipset: MT6993 (affected); MT8910 (affected). Source: CNA: MediaTek

## Severity and prioritization

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-416

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://www.mediatek.com/product-security-bulletin/November-2026 (CNA: MediaTek)

## Provenance

- CNA: MediaTek: https://www.cve.org/CVERecord?id=CVE-2026-20558; retrieved 2026-11-02; source updated 2026-11-02

Revision: a359aaefc4bf0b9448a9f17b7636e087700cdaa6136cb7306edeccae45aa56cb

Canonical: https://y2.dev/cve/CVE-2026-20558