CVE-2025-20888

Summary

CVE-2025-20888 is a serious out-of-bounds write vulnerability affecting the block size handling in libsthmbc.so's smp4vtd function, prior to the SMR Jan-2025 Release 1. This issue enables local attackers to execute arbitrary code with elevated privileges. The exploitation of this vulnerability necessitates user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.