CVE-2026-20591 — Vulnerability intelligence

MediaTek, Inc. — MediaTek chipset

Published: 2026-11-02T02:34:06.353Z

CVSS

8.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365075; Issue ID: MSV-9546.

Sources

• CVE-2026-20591
• Original advisory
• CVE-2026-20591