CVE-2026-20524
UnknownSummary
In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
Risk of local privilege escalation, potentially allowing attacker to gain elevated privileges on the system.
Recommendation
Apply patch ALPS11249004 (Issue ID: MSV-9170).
Other vulnerabilities in apu
See all- CVE-2026-20532Unknown
In the apu module, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20531Unknown
In the apu module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Original NVD description (English source)
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS