In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795.
Search vulnerabilities
CVE-2025-20697
CVSS 3.1 · 6.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-20698
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793.
CVSS 3.1 · 6.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-20694
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.
CVSS 3.1 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products