CVE Catalog

CVE-2026-20568

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Summary

In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Risk Assessment

A local attacker with System privileges could cause a system crash and potentially escalate privileges. This poses a risk to devices running the unpatched afe component.

Recommendation

Apply the update containing patch ALPS11439283. Verify the afe component version and prioritize deployment on exposed devices.

Other vulnerabilities in afe

See all
Original NVD description (English source)

In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11439283; Issue ID: MSV-10003.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS