Is CVE-2026-20489 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-20489?

CVE-2026-20489 has a CVSS v3 severity of MEDIUM (4.4).

Back

CVE-2026-20489

Description

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.