medium5.5
CVE-2025-20722
In gnss driver, there is a possible out of bounds read due to an integer overflow.
Impact
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rdkcentral | Rdk-B | Version 2024q1 |
| Android | Versions 14.0, 15.0 | |
| Openwrt | Openwrt | Versions 21.02.0, 23.05 |