CVE-2026-20492: Race Condition

Published Aug 3, 2026

Updated

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.

Affected Software

1 affected component

Audio HAL

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS10960026
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch AUTO00851250

Event History

Aug 3, 2026

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

DescriptionWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-20492?

CVE-2026-20492 has a risk score of 18, indicating a significant potential for impact.

What are the potential consequences of CVE-2026-20492?

CVE-2026-20492 can lead to a local denial of service, causing the system to become unresponsive.

How do I fix CVE-2026-20492?

To address CVE-2026-20492, it is recommended to apply the patch identified as ALPS10960026 for affected devices.

Which devices are affected by CVE-2026-20492?

CVE-2026-20492 specifically affects devices with MT6880, MT6890, MT6990, and MT6988 chipsets.

Is user interaction required to exploit CVE-2026-20492?

No, user interaction is not needed to exploit CVE-2026-20492.