CVE-2025-20780CWE-416

CVE-2025-20780

High · published January 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

⚡ A sneaky use after free could allow a local attacker with system privileges to level up their access! 😱 Think of a computer program like a restaurant where dishes are prepared and served. If a dish (memory) isn't properly cleared from the table (freed), the next hungry patron (attacker) could swipe it and get access to leftovers (sensitive data). If exploited, this memory corruption vulnerability could allow a clever attacker to escalate their privileges and take control of critical system functions. Imagine a diner suddenly gaining the keys to the kitchen, enabling them to whip up all sorts of trouble in a system they shouldn't have access to!

Put simply

Think of a computer program like a restaurant where dishes are prepared and served. If a dish (memory) isn't properly cleared from the table (freed), the next hungry patron (attacker) could swipe it and get access to leftovers (sensitive data). The vulnerability arises from a memory corruption issue due to a use-after-free condition in the display module, allowing attackers with existing system privileges to manipulate memory incorrectly.

What to do

If exploited, this memory corruption vulnerability could allow a clever attacker to escalate their privileges and take control of critical system functions. Imagine a diner suddenly gaining the keys to the kitchen, enabling them to whip up all sorts of trouble in a system they shouldn't have access to! To secure your system, patch immediately with ID ALPS10184061. Additionally, verify that all users with system privileges are trusted and monitor for any unusual activities. Staying ahead is key! You've got this! Implement these steps and keep your system secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00092 · 0.5th percentile
Weakness
CWE-416 · Use After Free
Published
2026-01-06T07:15Z
Affected products (2)
ProductVersionsFixed in
google/androidall versions—
google/androidall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In display, there is a possible memory corruption due to use after free
    cvelistv5