CVE-2026-20572
MediumCVSS 6.7Summary
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
Risk Assessment
A local attacker with System privileges could exploit this to escalate privileges further. This poses a risk to devices running the unpatched adsp component.
Recommendation
Apply the update containing patch ALPS11431442. Verify the adsp component version and prioritize deployment on exposed devices.
Other vulnerabilities in adsp
See all- CVE-2026-20570Medium
In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2026-20569Medium
In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
Original NVD description (English source)
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431442; Issue ID: MSV-9924.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS