{"affected":[{"defaultStatus":"unaffected","product":"MediaTek chipset","source":"CNA: MediaTek","vendor":"MediaTek, Inc.","versions":[{"status":"affected","version":"MT6993"},{"status":"affected","version":"MT8188"},{"status":"affected","version":"MT8189"},{"status":"affected","version":"MT8518S"},{"status":"affected","version":"MT8532"},{"status":"affected","version":"MT8668"}]}],"cveId":"CVE-2026-20582","cwes":["CWE-415"],"description":"In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411924; Issue ID: MSV-9748.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793586838733,"publishedAt":1793586838733,"references":[{"source":"CNA: MediaTek","tags":[],"url":"https://www.mediatek.com/product-security-bulletin/November-2026"}],"remediation":[],"revision":"557216d5353d9ba7e51f7c130114ebfe149b119158868650180613eb4be1e1d6","sources":[{"modifiedAt":1793586838733,"name":"CNA: MediaTek","retrievedAt":1793588991841,"url":"https://www.cve.org/CVERecord?id=CVE-2026-20582"}],"ssvc":null,"status":"published","title":"CVE-2026-20582","updatedAt":1793588991841}