CVE-2026-20476

In the ccci component, there is a vulnerability described as an out-of-bounds read caused by a missing bounds check. The impact is local denial of service with user-privilege execution required, and exploitation does not require user interaction. A patch has been issued (ALPS10981532; MSV-7660). ...