CVE-2026-20476

In the ccci component, there is a possible out-of-bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if an attacker already has System privilege. User interaction is needed for exploitation.

In the ccci module, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.