CVE-2026-20569: Use After Free

Published Nov 2, 2026

Updated

In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431474; Issue ID: MSV-9927.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

An attacker must already have System privilege on the affected device, so this is primarily relevant as a post-compromise privilege-escalation risk rather than an initial access vector.

Does exploitation require user interaction or remote access?

No user interaction is required. The listed attack vector is local, so exploitation requires local access in addition to already having System privilege.

What is the vendor tracking information for remediation?

The vendor identifies the fix as Patch ID ALPS11431474 and tracks the issue as MSV-9927.

CVE-2026-20569: Use After Free

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

Does exploitation require user interaction or remote access?

What is the vendor tracking information for remediation?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

Does exploitation require user interaction or remote access?

What is the vendor tracking information for remediation?