CVE-2025-20807: Integer Overflow
In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114841; Issue ID: MSV-4451.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS10114841
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20807?
CVE-2025-20807 is rated as a high severity vulnerability due to its potential for local escalation of privilege.
What is the exploitability of CVE-2025-20807?
CVE-2025-20807 can be exploited without user interaction once a malicious actor has obtained System privileges.
How do I fix CVE-2025-20807?
To fix CVE-2025-20807, apply the security patch identified by Patch ID ALPS10114841.
Which software versions are affected by CVE-2025-20807?
CVE-2025-20807 specifically affects Google Android version 16.0.
Is there any known mitigation for CVE-2025-20807?
Currently, the recommended mitigation for CVE-2025-20807 is to update to the patched version as no other mitigations are specified.