CVE-2026-20590: Medium severity vulnerability

Published Nov 2, 2026

Updated

In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11410704; Issue ID: MSV-9574.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already have System privilege on the affected device. Exploitation is local and does not require user interaction.

What is the expected impact of successful exploitation?

Successful exploitation can cause a system crash, resulting in a local denial of service. The supplied severity vector indicates no confidentiality or integrity impact.

How can this issue be tracked with the vendor?

The associated patch ID is ALPS11410704, and the vendor issue ID is MSV-9574. The referenced MediaTek product security bulletin is dated November 2026.

CVE-2026-20590: Medium severity vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

How can this issue be tracked with the vendor?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected impact of successful exploitation?

How can this issue be tracked with the vendor?