Description
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.
Published: 2026-10-05
Score: 6.2 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Local Denial of Service
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a double‑free bug in the application processor unit of MediaTek chipsets, identified by patch ALPS11249024. The flaw causes an application to crash when it attempts to free a memory block that has already been freed. This results in a local denial of service without the need for elevated privileges or any special user interaction, limiting the impact to availability loss of the affected application or system component.

Affected Systems

MediaTek, Inc. chipsets are affected. Because the public bulletin does not disclose specific product lines or firmware versions, it is inferred that all current MediaTek chipset deployments could be vulnerable until the authorized patch is applied.

Risk and Exploitability

The CVSS score of 6.2 indicates medium severity, and the vulnerability is not listed in the CISA KEV catalog. EPSS data is not available. The exploitation path is straightforward local code execution that triggers the buggy free operation; no user interaction or privilege escalation is required. The principal risk is service interruption rather than compromise of confidentiality or integrity.

Generated by OpenCVE AI on October 5, 2026 at 13:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the official MediaTek firmware patch identified as ALPS11249024 to all affected chipsets.
  • Reboot the device after patch installation to ensure the faulty APU code is no longer loaded.
  • Apply any subsequent firmware releases that address related stability issues and monitor for repeat crashes.

Generated by OpenCVE AI on October 5, 2026 at 13:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mt6899
Mediatek mt6899 Firmware
Mediatek mt6993
Mediatek mt6993 Firmware
Mediatek mt8668
Mediatek mt8668 Firmware
Mediatek mt8781
Mediatek mt8781 Firmware
Mediatek mt8910
Mediatek mt8910 Firmware
CPEs cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
Vendors & Products Mediatek
Mediatek mt6899
Mediatek mt6899 Firmware
Mediatek mt6993
Mediatek mt6993 Firmware
Mediatek mt8668
Mediatek mt8668 Firmware
Mediatek mt8781
Mediatek mt8781 Firmware
Mediatek mt8910
Mediatek mt8910 Firmware

Mon, 05 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Title Double Free in MediaTek Chipset Leading to Local Denial of Service

Mon, 05 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 05 Oct 2026 04:45:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Vendors & Products Mediatek, Inc.
Mediatek, Inc. mediatek Chipset

Mon, 05 Oct 2026 03:45:00 +0000

Type Values Removed Values Added
Title Double Free in MediaTek Chipset Leading to Local Denial of Service

Mon, 05 Oct 2026 02:15:00 +0000

Type Values Removed Values Added
Description In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.
Weaknesses CWE-415
References

Subscriptions

Mediatek Mt6899 Mt6899 Firmware Mt6993 Mt6993 Firmware Mt8668 Mt8668 Firmware Mt8781 Mt8781 Firmware Mt8910 Mt8910 Firmware
Mediatek, Inc. Mediatek Chipset
cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published:

Updated: 2026-10-05T10:15:42.521Z

Reserved: 2025-11-03T01:30:59.035Z

Link: CVE-2026-20532

cve-icon Vulnrichment

Updated: 2026-10-05T10:15:33.249Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-05T02:16:52.033

Modified: 2026-10-09T14:47:40.227

Link: CVE-2026-20532

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-05T13:45:07Z

Weaknesses