CVE Catalog

CVE-2025-20768

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

0th percentile - higher than 0% of all known CVEs

Summary

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Risk Assessment

The vulnerability requires existing System privileges but enables further escalation and potential kernel compromise, increasing the risk of full device takeover.

Recommendation

Apply vendor patch ALPS10196993 and restrict System-level privileges to trusted components only.

Other vulnerabilities in display

See all
Original NVD description (English source)

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS