CVE-2026-20411CWE-416

In cameraisp, there is a possible escalation of privilege due to use after free

High · published February 2, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

⚡ A sneaky use-after-free flaw in cameraisp could turn a System privilege into a local denial of service — and you won't even see it coming! 🔥 Think of it as a restaurant where a chef accidentally leaves a hot oven on after closing. If someone sneaks in with the right access, they can cause chaos, turning the whole place into a smoky disaster. If your system is vulnerable, it’s like leaving that oven on and unlocked — trouble is just around the corner. If exploited, an attacker with System privileges could trigger a local denial of service, effectively locking out users from essential services. This could lead to frustrating downtime and impact system reliability. It's a high-risk situation that you definitely don’t want lurking in your system!

Put simply

Think of it as a restaurant where a chef accidentally leaves a hot oven on after closing. If someone sneaks in with the right access, they can cause chaos, turning the whole place into a smoky disaster. If your system is vulnerable, it’s like leaving that oven on and unlocked — trouble is just around the corner. The vulnerability arises from a use-after-free condition within cameraisp, allowing attackers with existing System privileges to escalate their access and potentially cause a denial of service without needing any user interaction.

What to do

If exploited, an attacker with System privileges could trigger a local denial of service, effectively locking out users from essential services. This could lead to frustrating downtime and impact system reliability. It's a high-risk situation that you definitely don’t want lurking in your system! To patch this vulnerability, apply the fix available under Patch ID ALPS10351676 immediately. Go through your system configurations to ensure that any unnecessary System privileges are minimized, and conduct a thorough audit of user access. Preventive measures now can save you from headaches later! You’ve got this! By taking these steps, you’ll secure your system and keep it running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-02T08:15Z
EPSS history
Timeline
  • 02 FEB 08:15Z
    In cameraisp, there is a possible escalation of privilege due to use after free
    cvelistv5