CVE Catalog

CVE-2026-20514

MediumCVSS 4.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed.

Risk Assessment

Risk of disclosure of sensitive information to actors with system privileges, potentially compromising data security.

Recommendation

Apply the vendor patch ALPS11087632 (MSV-8244).

Other vulnerabilities in Audio HAL

See all
Original NVD description (English source)

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS