CVE-2026-20486

MediumCVSS 6.7

Published: 03/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 03/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

In the imgsensor module, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.

Risk Assessment

The risk involves potential privilege escalation by an attacker, which could enable further compromise of system security.

Recommendation

It is recommended to immediately apply the patch ALPS11012302.

Other vulnerabilities in imgsensor

CVE-2025-20721High
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Original NVD description (English source)

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS