CVE-2025-20783

CVE-2025-20783 describes an out-of-bounds write due to a missing bounds check in display code, potentially enabling local privilege escalation to SYSTEM without user interaction. The vulnerability is associated with MediaTek chipsets, with references noting Patch ID ALPS10182882 and Issue MSV-468...

CVE-2025-20780

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712...

CVE-2025-20780

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712...

PT-2026-1371

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free in display. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User...

PT-2026-1368

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184870 Description An out-of-bounds write issue exists due to a missing bounds check in the display component. Successful exploitation could allow a malicious actor who already has System privileges to gain local...

EUVD-2025-200157

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805...

CVE-2025-20775

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4795...

CVE-2025-20776

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184297; Issue ID: MSV-4759...

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

CVE-2025-20771

In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802...

CVE-2025-20772

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4795...

CVE-2025-20776

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184297; Issue ID: MSV-4759...

CVE-2025-20774

CVE-2025-20774 describes an out-of-bounds write due to a missing bounds check in the display path, potentially enabling local privilege escalation if the attacker already has System privileges. Exploitation reportedly does not require user interaction. Multiple sources (Red Hat, NVD, CVE listing,...

CVE-2025-20773

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4797...

CVE-2025-20770

CVE-2025-20770 involves a memory corruption via use-after-free in display handling on MediaTek chipsets, resulting in local privilege escalation if an attacker already has System privileges. No user interaction is required. The vulnerability affects the component responsible for display/memory ha...

PT-2025-48628

In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802...

EUVD-2024-54696

Malicious code in bioql PyPI...

CVE-2025-38205 drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 Why If the dummy values in populatedummydmlsurfacecfg aren't updated then they can lead to a divide by zero in downstream callers like CalculateVMAndRowBytes...

CVE-2024-37743

An issue in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to execute arbitrary code via the Document Display Component...

PT-2025-26774 · Mmzdev · Mmzdev Knowledgegpt

Name of the Vulnerable Software and Affected Versions: mmzdev KnowledgeGPT version 0.0.5 Description: An issue in the Document Display Component allows a remote attacker to execute arbitrary code. Recommendations: For mmzdev KnowledgeGPT version 0.0.5, consider disabling the Document Display...