{"id":"CVE-2026-20580","title":"In usb, there is a possible system crash due to use after free","summary":"In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS114…","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvssSource":"adp","cwe":["CWE-416"],"vendor":"MediaTek, Inc.","product":"MediaTek chipset","affected":["mediatek_chipset MT2735","mediatek_chipset MT2737","mediatek_chipset MT6761","mediatek_chipset MT6765","mediatek_chipset MT6768","mediatek_chipset MT6781","mediatek_chipset MT6853","mediatek_chipset MT6855","mediatek_chipset MT6858","mediatek_chipset MT6877","mediatek_chipset MT6878","mediatek_chipset MT6879","mediatek_chipset MT6880","mediatek_chipset MT6881","mediatek_chipset MT6883","mediatek_chipset MT6885","mediatek_chipset MT6889","mediatek_chipset MT6890","mediatek_chipset MT6893","mediatek_chipset MT6897","mediatek_chipset MT6985","mediatek_chipset MT6988","mediatek_chipset MT6989","mediatek_chipset MT6990","mediatek_chipset MT6991","mediatek_chipset MT6993","mediatek_chipset MT8188","mediatek_chipset MT8189","mediatek_chipset MT8196","mediatek_chipset MT8668","mediatek_chipset MT8768","mediatek_chipset MT8786"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-02T16:46:03.578418Z"},"published":"2026-11-02","updated":"2026-11-02","sourceUpdated":"2026-11-02T16:46:09.428Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20580","references":[{"url":"https://www.mediatek.com/product-security-bulletin/November-2026"}],"tags":["cve.org"],"epss":0.001,"epssPercentile":0.00859,"ingestedAt":"2026-11-05T19:30:42.711Z","slug":"CVE-2026-20580","body":"## Overview\n\nIn usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11412004; Issue ID: MSV-9752.\n\n## Affected\n\n- `mediatek_chipset MT2735`\n- `mediatek_chipset MT2737`\n- `mediatek_chipset MT6761`\n- `mediatek_chipset MT6765`\n- `mediatek_chipset MT6768`\n- `mediatek_chipset MT6781`\n- `mediatek_chipset MT6853`\n- `mediatek_chipset MT6855`\n- `mediatek_chipset MT6858`\n- `mediatek_chipset MT6877`\n- `mediatek_chipset MT6878`\n- `mediatek_chipset MT6879`\n- `mediatek_chipset MT6880`\n- `mediatek_chipset MT6881`\n- `mediatek_chipset MT6883`\n- `mediatek_chipset MT6885`\n- `mediatek_chipset MT6889`\n- `mediatek_chipset MT6890`\n- `mediatek_chipset MT6893`\n- `mediatek_chipset MT6897`\n- `mediatek_chipset MT6985`\n- `mediatek_chipset MT6988`\n- `mediatek_chipset MT6989`\n- `mediatek_chipset MT6990`\n- `mediatek_chipset MT6991`\n- `mediatek_chipset MT6993`\n- `mediatek_chipset MT8188`\n- `mediatek_chipset MT8189`\n- `mediatek_chipset MT8196`\n- `mediatek_chipset MT8668`\n- `mediatek_chipset MT8768`\n- `mediatek_chipset MT8786`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}