Description


In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114841; Issue ID: MSV-4451.

Weaknesses



CWE-190

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-06T02:15:44.970Z

3 days ago

Last modified

2026-01-08T19:20:46.453Z

19 hours ago