CVE-2025-20800CWE-787

CVE-2025-20800

High · published January 6, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ A sneaky out-of-bounds write in mminfra could let local attackers escalate privileges without breaking a sweat! This is like a restaurant where the chef misreads the order and accidentally overfills a bowl, causing it to overflow into the next one — if someone’s already in the kitchen, they can take advantage of the mess. 🍽️ If exploited, an attacker with system privileges could seize control of sensitive operations, possibly gaining access to confidential data or system functionalities. This could lead to an absolute chaos scenario where they can manipulate system operations at will — talk about a potential nightmare!

Put simply

This is like a restaurant where the chef misreads the order and accidentally overfills a bowl, causing it to overflow into the next one — if someone’s already in the kitchen, they can take advantage of the mess. 🍽️ The vulnerability occurs due to a missing bounds check, allowing for an out-of-bounds write. This could lead to unauthorized privilege escalation if an attacker with system access exploits it.

What to do

If exploited, an attacker with system privileges could seize control of sensitive operations, possibly gaining access to confidential data or system functionalities. This could lead to an absolute chaos scenario where they can manipulate system operations at will — talk about a potential nightmare! Patch your systems immediately with the fix identified by ALPS10267349. Review user permissions to minimize risk exposure and monitor for any suspicious activity. Keeping your systems updated is your best defense! You've got this! Follow these steps, and you'll be well on your way to securing your systems. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00080 · 0.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-06T07:15Z
Affected products (3)
ProductVersionsFixed in
google/androidall versions—
google/androidall versions—
google/androidall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In mminfra, there is a possible out of bounds write due to a missing bounds check
    cvelistv5