PT-2025-48631 · Alps · Alps

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-20774

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10196993

Description An out-of-bounds write issue exists in the display component due to a missing bounds check. Successful exploitation could allow a malicious actor who already has System privileges to escalate privileges locally. User interaction is not required for exploitation.

Recommendations Update to version ALPS10196993 or later.

Fix

LPE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2025-20774

Affected Products

Alps

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-20774 · Security Note
• https://corp.mediatek.com/product-security-bulletin/December-2025 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20774 · Vendor Advisory
• https://t.me/cveNotify/144521 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1995773462032368116 · Twitter Post
• https://twitter.com/CVEnew/status/1995711333439012881 · Twitter Post
• https://t.me/CVEtracker/38627 · Telegram Post