CVE-2026-20512
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
Risk Assessment
Risk of privilege escalation, potentially allowing an attacker full control over the system.
Recommendation
Apply the vendor patch ALPS11087540 (MSV-8246).
Other vulnerabilities in Audio HAL
See all- CVE-2026-20514Medium
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2026-20513Medium
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2026-20507Medium
In Audio HAL, there is a possible escalation of privilege due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2026-20506Medium
In Audio HAL, there is a possible escalation of privilege due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2026-20492Medium
In Audio HAL, there is a possible system unresponsiveness due to a race condition. This could lead to local denial of service, requiring User execution privileges. User interaction is not required for exploitation.
- CVE-2026-20480Medium
In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.
- CVE-2026-20478Medium
In Audio HAL, a heap buffer overflow could lead to an out-of-bounds write, causing local denial of service. User execution privileges are required, but no user interaction is needed.
Original NVD description (English source)
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS