CVE-2026-20501: Buffer Overflow
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11262030
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability is described as enabling local escalation of privilege and requiring no additional execution privileges. Exploitation does not require user interaction.
Is this remotely exploitable?
The available information identifies this as a local privilege-escalation issue. It does not state that remote exploitation is possible.
What identifier should be used to locate the vendor fix?
The listed patch identifier is ALPS11262030. The associated issue identifier is MSV-9197.