CVE-2026-20532
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In the apu module, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not required for exploitation.
Risk Assessment
The risk to the organization is local denial of service, which could cause application crashes and disrupt system operation. The attacker does not need additional privileges, increasing the risk.
Recommendation
Apply patch ALPS11249024 (Issue ID: MSV-9168) to the apu module. Also monitor application stability.
Other vulnerabilities in apu
See all- CVE-2026-20531High
In the apu module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20524High
In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS