CVE-2026-20412CWE-787

In cameraisp, there is a possible out of bounds write due to a missing bounds check

High · published February 2, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

⚡ An out of bounds write in cameraisp could let a local attacker escalate their privileges, and the best part? No user interaction is needed for exploitation! 🔥 Think of it like an unmonitored service entrance at a stadium. A crafty individual with the right access can slip through the door and take control of the VIP area without anyone noticing, potentially causing chaos! If exploited, this vulnerability could allow an attacker with System privileges to amplify their control, leading to unauthorized access and manipulation of sensitive data or system settings. Imagine the ramifications if they can hijack the entire system—it's like handing over the keys to your fortress!

Put simply

Think of it like an unmonitored service entrance at a stadium. A crafty individual with the right access can slip through the door and take control of the VIP area without anyone noticing, potentially causing chaos! This vulnerability arises from a missing bounds check in cameraisp, enabling an attacker to write data outside the expected limits and escalate privileges without additional permissions.

What to do

If exploited, this vulnerability could allow an attacker with System privileges to amplify their control, leading to unauthorized access and manipulation of sensitive data or system settings. Imagine the ramifications if they can hijack the entire system—it's like handing over the keys to your fortress! To protect yourself, apply the patch ID ALPS10351676 to close this vulnerability immediately. Additionally, review system access and privileges to ensure only trusted users have System privileges. Don't leave any doors ajar! You've got this! Follow these steps to lock down your system and stay secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00102 · 0.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-02T08:15Z
EPSS history
Timeline
  • 02 FEB 08:15Z
    In cameraisp, there is a possible out of bounds write due to a missing bounds check
    cvelistv5