CVE-2025-20747

MediumCVSS 6.7

Published: 04/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Risk Assessment

A local attacker with System privileges could escalate privileges, taking control of the system.

Recommendation

Apply patch ID ALPS10010443 (Issue ID: MSV-3966) provided by the vendor.

Other vulnerabilities in gnss service

CVE-2025-20746Medium
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS