CVE-2025-20723: High severity Google Android vulnerability
In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920033; Issue ID: MSV-3797.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNSS driverto a version that resolves this vulnerability.Patch ALPS09920033
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20723?
CVE-2025-20723 is classified as a high severity vulnerability due to its potential for local escalation of privilege.
How do I mitigate CVE-2025-20723?
To fix CVE-2025-20723, apply the patch identified as ALPS09920033.
Who is affected by CVE-2025-20723?
CVE-2025-20723 affects certain devices running Google Android versions 14.0 and 15.0.
What type of exploitation does CVE-2025-20723 allow?
CVE-2025-20723 allows for local escalation of privilege if a malicious actor has gained system privilege.
Is user interaction required to exploit CVE-2025-20723?
No, user interaction is not needed for exploitation of CVE-2025-20723.