CVE-2025-20767CWE-787

In display, there is a possible out of bounds write due to an integer overflow

High · published December 2, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ A sneaky integer overflow could let an attacker escalate privileges without breaking a sweat! 🚀 Think of it like a restaurant where a waiter mistakenly serves a dish meant for VIPs to a regular customer — once they take a bite, they might just waltz right into the kitchen and take over! 🍽️ If exploited, this vulnerability could allow a local user with system privileges to gain further control of the system, potentially leading to catastrophic data exposure or unauthorized actions. It's like giving someone the keys to the city after they've already snuck past the gate!

Put simply

Think of it like a restaurant where a waiter mistakenly serves a dish meant for VIPs to a regular customer — once they take a bite, they might just waltz right into the kitchen and take over! 🍽️ This vulnerability stems from an out of bounds write that occurs due to an integer overflow in the display function. Since user interaction isn't necessary for exploitation, an authorized user with system privileges can leverage this flaw for malicious purposes.

What to do

If exploited, this vulnerability could allow a local user with system privileges to gain further control of the system, potentially leading to catastrophic data exposure or unauthorized actions. It's like giving someone the keys to the city after they've already snuck past the gate! To protect against this vulnerability, apply the patch ID ALPS10196993 as soon as possible. Regularly review your system’s privilege assignments and ensure users only have access they absolutely need. Stay proactive! You've got this! By taking these steps, you'll keep your system safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00080 · 0.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-02T02:34Z
EPSS history
Timeline
  • 02 DEC 02:34Z
    In display, there is a possible out of bounds write due to an integer overflow
    cvelistv5