CVE-2026-20531
UnknownSummary
In the apu module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
Risk Assessment
The risk to the organization is local privilege escalation, which could allow an attacker to gain full control over the system. The attacker does not need additional privileges, increasing the risk.
Recommendation
Apply patch ALPS11249016 (Issue ID: MSV-9169) to the apu module. Also restrict access to the system.
Other vulnerabilities in apu
See all- CVE-2026-20532Unknown
In the apu module, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20524Unknown
In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS