CVE-2025-20722: Integer Overflow
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS09920036
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20722?
CVE-2025-20722 has a moderate severity rating due to the potential for local information disclosure.
How do I fix CVE-2025-20722?
To fix CVE-2025-20722, apply the patch identified as ALPS09920036 as soon as possible.
Who is affected by CVE-2025-20722?
CVE-2025-20722 affects specific versions of software from Rdkcentral, Google Android, and OpenWrt.
What type of vulnerability is CVE-2025-20722?
CVE-2025-20722 is an out-of-bounds read vulnerability due to an integer overflow.
Is user interaction required to exploit CVE-2025-20722?
No, user interaction is not needed for the exploitation of CVE-2025-20722.