CVE-2025-20804
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
In the dpe component, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is needed for exploitation.
Risk Assessment
Risk of local privilege escalation, potentially allowing an attacker to gain control or perform unauthorized operations.
Recommendation
Apply patch ALPS10198951 or update the system to a patched version.
Other vulnerabilities in dpe
See all- CVE-2025-20807Medium
In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.
- CVE-2025-20806Medium
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2025-20805Medium
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.
- CVE-2025-20803Medium
In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is needed for exploitation.
Original NVD description (English source)
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10198951; Issue ID: MSV-4503.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS