CVE Catalog

CVE-2026-20530

MediumCVSS 6.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

1th percentile - higher than 1% of all known CVEs

Summary

In the display module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not required for exploitation.

Risk Assessment

The risk to the organization is local privilege escalation, which could allow an attacker to gain full control over the system. The attacker must already have System privileges, which limits the risk but is still serious.

Recommendation

Apply patch ALPS11292777 (Issue ID: MSV-9195) to the display module. Also restrict access to System privileges.

Other vulnerabilities in display

See all
Original NVD description (English source)

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS