CVE Catalog

CVE-2026-20574

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Summary

In the afe component, there is a use-after-free vulnerability leading to memory corruption. It could enable local privilege escalation for an actor who already holds System privileges.

Risk Assessment

An attacker with System privileges could exploit the memory corruption to escalate privileges. The lack of required user interaction increases risk.

Recommendation

Apply patch ALPS11431400. Limit granting of System privileges and monitor suspicious operations in the afe component.

Other vulnerabilities in afe

See all
Original NVD description (English source)

In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431400; Issue ID: MSV-9922.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS