CVE-2025-20786
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4673.
Affected (3)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.0 |
| Running on/with | Platform Versions |
|---|---|
Mediatek Mt6739 | All versions |
Mediatek Mt6761 | All versions |
Mediatek Mt6765 | All versions |
Mediatek Mt6768 | All versions |
Mediatek Mt6781 | All versions |
Mediatek Mt6789 | All versions |
Mediatek Mt6833 | All versions |
Mediatek Mt6835 | All versions |
Mediatek Mt6853 | All versions |
Mediatek Mt6855 | All versions |
Mediatek Mt6877 | All versions |
Mediatek Mt6878 | All versions |
Mediatek Mt6879 | All versions |
Mediatek Mt6883 | All versions |
Mediatek Mt6885 | All versions |
Mediatek Mt6886 | All versions |
Mediatek Mt6889 | All versions |
Mediatek Mt6893 | All versions |
Mediatek Mt6895 | All versions |
Mediatek Mt6897 | All versions |
Mediatek Mt6899 | All versions |
Mediatek Mt6983 | All versions |
Mediatek Mt6985 | All versions |
Mediatek Mt6989 | All versions |
Mediatek Mt6991 | All versions |
Mediatek Mt8186 | All versions |
Mediatek Mt8188 | All versions |
Mediatek Mt8196 | All versions |
Mediatek Mt8667 | All versions |
Mediatek Mt8673 | All versions |
Mediatek Mt8676 | All versions |
Mediatek Mt8678 | All versions |
Mediatek Mt8765 | All versions |
Mediatek Mt8766 | All versions |
Mediatek Mt8768 | All versions |
Mediatek Mt8771 | All versions |
Mediatek Mt8781 | All versions |
Mediatek Mt8791t | All versions |
Mediatek Mt8792 | All versions |
Mediatek Mt8793 | All versions |
Mediatek Mt8795t | All versions |
Mediatek Mt8796 | All versions |
Mediatek Mt8798 | All versions |
Mediatek Mt8873 | All versions |
Mediatek Mt8883 | All versions |
Related CWEs
CWE-415
Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
References (1)
Source: security@mediatek.com
Vendor Advisory
Timeline
No history available yet.