CVE-2026-20414
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:15:09
- Zuletzt bearbeitet 03.02.2026 21:54:32
In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ...
CVE-2026-20413
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:15:07
- Zuletzt bearbeitet 03.02.2026 21:55:23
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ...
CVE-2026-20412
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:15:05
- Zuletzt bearbeitet 04.02.2026 13:44:58
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Pat...
CVE-2026-20411
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:15:03
- Zuletzt bearbeitet 04.02.2026 13:45:57
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALP...
CVE-2026-20410
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:15:01
- Zuletzt bearbeitet 04.02.2026 13:46:35
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ...
CVE-2026-20409
- EPSS 0.1%
- Veröffentlicht 02.02.2026 08:14:58
- Zuletzt bearbeitet 04.02.2026 13:47:37
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ...
CVE-2025-48647
- EPSS 0.09%
- Veröffentlicht 16.01.2026 18:19:02
- Zuletzt bearbeitet 27.01.2026 20:18:31
In cpm_fwtp_msg_handler of cpm/google/lib/tracepoint/cpm_fwtp_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interact...
CVE-2025-36911
- EPSS 6.94%
- Veröffentlicht 15.01.2026 17:41:57
- Zuletzt bearbeitet 28.01.2026 05:16:08
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction ...
CVE-2025-20800
- EPSS 0.07%
- Veröffentlicht 06.01.2026 02:15:44
- Zuletzt bearbeitet 08.01.2026 19:23:42
In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch...
- EPSS 0.05%
- Veröffentlicht 06.01.2026 02:15:44
- Zuletzt bearbeitet 30.03.2026 12:16:25
In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS...