CVE-2026-20572
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431442; Issue ID: MSV-9924.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121727 Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body… CWE-191
- CVE-2026-61497 TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report… CWE-191
- CVE-2026-120060 psqlODBC trusts counts and lengths in server data in three places. CWE-191
- CVE-2026-120058 psqlODBC sizes its row cache from the column count of a cursor's first result, but… CWE-191
- CVE-2026-20576 In afe, there is a possible out of bounds write due to a missing bounds check. CWE-191
- CVE-2026-111735 P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). CWE-191
- CVE-2026-103411 An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session… CWE-191
- CVE-2026-112625 An integer underflow was addressed with improved input validation. CWE-191