CVE Catalog

CVE-2026-20513

MediumCVSS 4.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

7th percentile - higher than 7% of all known CVEs

Summary

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

Risk Assessment

Risk of disclosure of sensitive information to actors with system privileges, potentially compromising data security.

Recommendation

Apply the vendor patch ALPS11087533 (MSV-8245).

Other vulnerabilities in Audio HAL

See all
Original NVD description (English source)

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS