CVE Catalog

CVE-2026-20576

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Summary

In the afe component, there is an out-of-bounds write vulnerability due to a missing bounds check. It could lead to local privilege escalation by an actor who already has System privileges.

Risk Assessment

An attacker with System privileges could exploit the out-of-bounds write to escalate privileges. Exploitation does not require user interaction.

Recommendation

Apply patch ALPS11431385. Restrict access to System privileges and monitor suspicious operations in the afe component.

Other vulnerabilities in afe

See all
Original NVD description (English source)

In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS