← Back

CVE-2025-20658

nvd nist
Published: Apr 7, 2025Modified: Apr 9, 2025

JSON object

Loading...
6.0
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Exploitability: 0.5 / Impact: 5.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597.

Affected (22)

Google
1 product
Android
Mediatek
18 products
Mt2718
Mt6781
Mt6789
Mt6835
Mt6855
Mt6878
Mt6879
Mt6886
Mt6895
Mt6897
Mt6983
Mt6985
Mt6989
Mt8196
Mt8673
Mt8676
Mt8678
Mt8781
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Google
Android
Version 12.0
Android
Version 13.0
Android
Version 14.0
Android
Version 15.0
Mt2718
All versions
Mt6781
All versions
Mt6789
All versions
Mt6835
All versions
Mt6855
All versions
Mt6878
All versions
Mt6879
All versions
Mt6886
All versions
Mt6895
All versions
Mt6897
All versions
Mt6983
All versions
Mt6985
All versions
Mt6989
All versions
Mt8196
All versions
Mt8673
All versions
Mt8676
All versions
Mt8678
All versions
Mt8781
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.