CVE-2025-20796High· 7.8▾ TwilightIn imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploita…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.08%
Last analysed / modified upstream
0.08% → 0.1%
In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553.
android = 15.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-20806Medium· 6.7In dpe, there is a possible memory corruption due to use after free
CVE-2025-20804Medium· 6.7In dpe, there is a possible memory corruption due to use after free
CVE-2025-20800High· 7.8In mminfra, there is a possible out of bounds write due to a missing bounds check
CVE-2025-20801High· 7.0In seninf, there is a possible memory corruption due to a race condition
CVE-2025-20783Medium· 6.7In display, there is a possible out of bounds write due to a missing bounds check
CVE-2024-50302Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to mak…