CVE-2026-20468
Received Received - Intake

Privilege Escalation in Apusys Due to Confused Deputy

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: MediaTek, Inc.

Description
In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-20468
EUVD
EUVD-2026-52058

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in apusys allows a malicious actor with System privilege to escalate their privileges further due to a confused deputy issue. Exploitation does not require user interaction.

Impact Analysis

If an attacker already has System privilege on a vulnerable system, they could exploit this to gain higher privileges, potentially compromising the entire system or accessing sensitive data.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR or HIPAA if it involves unauthorized privilege escalation, as it may lead to unauthorized access to sensitive data. However, specific compliance implications depend on the system's use case and data handling practices.

Mitigation Strategies

Apply the patch identified as Patch ID AUTO00833804 to address the confused deputy issue in apusys. Ensure the System privilege is properly restricted to prevent local escalation of privilege.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20468. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart