CVE Catalog

CVE-2026-20473

MediumCVSS 6.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In the display component, there is a potential memory corruption due to use after free. This could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not required for exploitation.

Risk Assessment

An attacker with System privileges could gain higher privileges, potentially leading to full device compromise.

Recommendation

Apply patch ALPS11019722 to fix the vulnerability.

Other vulnerabilities in Display

See all
Original NVD description (English source)

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS