CVE-2025-20797CWE-121CWE-787

CVE-2025-20797

High · published January 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write lurking in the battery could be your system's worst nightmare, paving the way for local privilege escalation! Think of it like a guest at a party sneaking into the host's private office, bypassing the locked doors that should’ve kept them out — all because someone forgets to check a crucial access log. If an attacker with system privileges exploits this vulnerability, they could access sensitive areas of the operating system, potentially gaining full control and performing any action they desire. This could lead to data breaches, system manipulation, or even a complete takeover of your device. It's like handing over the keys to the kingdom without keeping a watchful eye!

Put simply

Think of it like a guest at a party sneaking into the host's private office, bypassing the locked doors that should’ve kept them out — all because someone forgets to check a crucial access log. This vulnerability arises due to a missing bounds check in the battery management system, allowing an attacker with system privileges to write beyond allocated memory spaces. This creates opportunities for privilege escalation without needing user interaction.

What to do

If an attacker with system privileges exploits this vulnerability, they could access sensitive areas of the operating system, potentially gaining full control and performing any action they desire. This could lead to data breaches, system manipulation, or even a complete takeover of your device. It's like handing over the keys to the kingdom without keeping a watchful eye! To mitigate this risk, apply the patch identified with ID ALPS10315812 immediately. Make sure to review your system's privilege configurations and monitor for any anomalous activities. Staying proactive is key! You've got this! Follow these steps and secure your system with confidence! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00089 · 0.4th percentile
Weaknesses
CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2026-01-06T07:15Z
Affected products (3)
ProductVersionsFixed in
google/androidall versions—
google/androidall versions—
google/androidall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In battery, there is a possible out of bounds write due to a missing bounds check
    cvelistv5