CVE-2026-20595
MediumCVSS 6.7Summary
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
Risk Assessment
An attacker with System privileges could escalate privileges and gain greater control over the device. The risk applies to devices with the neuropilot component.
Recommendation
Apply the update containing patch ALPS11263078. Restrict System privileges to trusted applications only.
Other vulnerabilities in neuropilot
See all- CVE-2026-20523High
In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-20522High
In the neuropilot component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS