CVE Vulnerabilities

CVE-2025-20771

Use of Uninitialized Variable

Published: Dec 02, 2025 | Modified: Dec 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802.

Weakness

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Affected Software

Name Vendor Start Version End Version
Android Google 14.0 (including) 14.0 (including)
Android Google 15.0 (including) 15.0 (including)
Android Google 16.0 (including) 16.0 (including)

Potential Mitigations

References