{"affected":[{"defaultStatus":"unaffected","product":"MediaTek chipset","source":"CNA: MediaTek","vendor":"MediaTek, Inc.","versions":[{"status":"affected","version":"MT6858"},{"status":"affected","version":"MT6881"},{"status":"affected","version":"MT6993"},{"status":"affected","version":"MT8188"},{"status":"affected","version":"MT8189"},{"status":"affected","version":"MT8518S"},{"status":"affected","version":"MT8532"},{"status":"affected","version":"MT8668"}]}],"cveId":"CVE-2026-20581","cwes":["CWE-416"],"description":"In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411985; Issue ID: MSV-9750.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793586837386,"publishedAt":1793586837386,"references":[{"source":"CNA: MediaTek","tags":[],"url":"https://www.mediatek.com/product-security-bulletin/November-2026"}],"remediation":[],"revision":"7a1190c408f5fd49d751efea48a4a313e57c858f1b5fdc3146b6c9c8e265fff5","sources":[{"modifiedAt":1793586837386,"name":"CNA: MediaTek","retrievedAt":1793588990844,"url":"https://www.cve.org/CVERecord?id=CVE-2026-20581"}],"ssvc":null,"status":"published","title":"CVE-2026-20581","updatedAt":1793588990844}