MediaTek GPU PDMA PrivEsc via Missing Permission Check
CVE-2026-20591 Published on November 2, 2026
In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365075; Issue ID: MSV-9546.
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2026-20591 has been classified to as a Dangling pointer vulnerability or weakness.
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT6993 is affected.
- Version MT8910 is affected.