CVE Catalog

CVE-2025-20787

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.14%

3th percentile - higher than 3% of all known CVEs

Summary

In the display component, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.

Risk Assessment

Risk of local privilege escalation, potentially allowing an attacker to gain control.

Recommendation

Apply patch ALPS10149879 or update the system to a patched version.

Other vulnerabilities in display

See all
Original NVD description (English source)

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS