Description
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
Affected products
mediatek: mt8910 firmware; mediatek: mt8910; mediatek: mt6899 firmware; mediatek: mt6899; mediatek: mt6993 firmware; mediatek: mt6993; mediatek: mt8668 firmware; mediatek: mt8668; mediatek: mt8781 firmware; mediatek: mt8781; mediatek: mt8793 firmware; mediatek: mt8793
References1
- www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory
Metrics
- CVSS 3.1
-
8.4
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 2 · as of 10 November 2026
- CWE
- CWE-416
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.