CVE-2026-20511
UnknownSummary
In SurfaceFlinger, there is a possible memory corruption due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
Risk Assessment
Risk of privilege escalation, potentially allowing an attacker full control over the system.
Recommendation
Apply the vendor patch ALPS11123860 (MSV-8890).
Other vulnerabilities in SurfaceFlinger
See all- CVE-2017-0546High
A vulnerability in SurfaceFlinger allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0405High
A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process.
Original NVD description (English source)
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.