CVE-2025-20797

High

Published: 06/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

In the battery module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation if an attacker already has System privilege. User interaction is not required for exploitation.

Risk Assessment

The risk is that an attacker with System privileges can escalate privileges further, potentially leading to full device compromise. Since no user interaction is needed, the attack can be automated.

Recommendation

Apply the vendor patch ALPS10315812 immediately. Also, restrict System privilege assignment to trusted entities only.

Other vulnerabilities in Battery

CVE-2025-20798High
In the battery module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation if an attacker has already obtained System privilege. User interaction is not required for exploitation.

Original NVD description (English source)

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5534.