CVE-2025-20764CWE-787

In smi, there is a possible out of bounds write due to a missing bounds check

High · published December 2, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

⚡ A missing bounds check in smi could turn your local privilege into an unstoppable force! This vulnerability allows an out-of-bounds write that can elevate privileges without any user interaction! Think of it like a sneaky employee who discovers an unguarded access pass to the executive lounge. Once inside, they can rearrange the company’s priorities without anyone noticing until it’s too late! If a malicious actor has already obtained System privileges, they could exploit this vulnerability to gain even greater control over the system. This could lead to unauthorized changes, data leaks, or even a complete compromise of your local environment — absolutely devastating!

Put simply

Think of it like a sneaky employee who discovers an unguarded access pass to the executive lounge. Once inside, they can rearrange the company’s priorities without anyone noticing until it’s too late! CVE-2025-20764 is an out-of-bounds write vulnerability in the smi software due to a missing bounds check. This oversight allows an attacker with existing System privileges to manipulate memory, potentially escalating their access levels and capabilities.

What to do

If a malicious actor has already obtained System privileges, they could exploit this vulnerability to gain even greater control over the system. This could lead to unauthorized changes, data leaks, or even a complete compromise of your local environment — absolutely devastating! To remediate this vulnerability, patch your system to ID ALPS10259774 immediately. Regularly audit user privileges and ensure only necessary access is granted. Always stay updated on security updates and best practices! You've got this! With a quick patch, you'll be back in control and your system will be safe again! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00080 · 0.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-02T02:34Z
EPSS history
Timeline
  • 02 DEC 02:34Z
    In smi, there is a possible out of bounds write due to a missing bounds check
    cvelistv5