CVE-2026-20553
MediumCVSS 6.8Summary
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
An attacker with physical access to the device could exploit the vulnerability to escalate privileges on the system. This could lead to device compromise.
Recommendation
Apply the update containing patch ALPS11468968. Restrict physical access to the device to trusted individuals.
Other vulnerabilities in DA
Original NVD description (English source)
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11468968; Issue ID: MSV-10166.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS