CVE-2025-20653CWE-190
In da, there is a possible out of bounds read due to an integer overflow
Medium · published March 3, 2025
What it is
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00082 · 0.2th percentile
- Weakness
- CWE-190 · Integer Overflow or Wraparound
- Published
- 2025-03-03T02:25Z
EPSS history
Timeline