CVE-2026-20536
UnknownSummary
In the aidl module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation.
Risk Assessment
The risk to the organization is local privilege escalation, which could allow an attacker to gain full control over the system. The attacker must already have System privileges, which limits the risk but is still serious.
Recommendation
Apply patch ALPS11242428 (Issue ID: MSV-9038) to the aidl module. Also restrict access to System privileges.
Other vulnerabilities in aidl
See all- CVE-2026-20537Unknown
In the aidl module, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation.
- CVE-2026-20535Unknown
In the aidl module, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation.
Original NVD description (English source)
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS