CVE-2026-20532
UnknownSummary
In the apu module, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not required for exploitation.
Risk Assessment
The risk to the organization is local denial of service, which could cause application crashes and disrupt system operation. The attacker does not need additional privileges, increasing the risk.
Recommendation
Apply patch ALPS11249024 (Issue ID: MSV-9168) to the apu module. Also monitor application stability.
Other vulnerabilities in apu
See all- CVE-2026-20531Unknown
In the apu module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20524Unknown
In the apu component, there is a possible memory corruption due to improper input validation. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS