CVE-2026-20529
UnknownSummary
In the battery component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation if an attacker already has System privilege. User interaction is not needed for exploitation.
Risk Assessment
Risk of local privilege escalation, potentially allowing full device compromise.
Recommendation
Apply the vendor patch ALPS11276677 (Issue ID: MSV-9217).
Other vulnerabilities in battery
See all- CVE-2025-20798High
In the battery module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation if an attacker has already obtained System privilege. User interaction is not required for exploitation.
- CVE-2025-20797High
In the battery module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local privilege escalation if an attacker already has System privilege. User interaction is not required for exploitation.
Original NVD description (English source)
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS