CVE Catalog

CVE-2025-20721

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.09%

0th percentile - higher than 0% of all known CVEs

Summary

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Risk Assessment

A local attacker with System privileges can exploit this flaw to escalate privileges and take control of the device. The lack of required user interaction increases the risk.

Recommendation

Apply the patch identified as Patch ID: ALPS10089545 as soon as possible. It is also recommended to verify whether the device has already been compromised.

Other vulnerabilities in imgsensor

Original NVD description (English source)

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10089545; Issue ID: MSV-4279.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS