CVE-2026-20509

MediumCVSS 6.7

Published: 07/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 07/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In Power HAL, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

Risk Assessment

Risk of privilege escalation, potentially allowing an attacker full control over the system.

Recommendation

Apply the vendor patch ALPS11165543 (MSV-9011).

Other vulnerabilities in Power HAL

CVE-2026-20508Medium
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.

Original NVD description (English source)

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS