CVE-2025-20721
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
Risk Assessment
A local attacker with System privileges can exploit this flaw to escalate privileges and take control of the device. The lack of required user interaction increases the risk.
Recommendation
Apply the patch identified as Patch ID: ALPS10089545 as soon as possible. It is also recommended to verify whether the device has already been compromised.
Other vulnerabilities in imgsensor
Original NVD description (English source)
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10089545; Issue ID: MSV-4279.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

