IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.6Medium

CVE-2025-20635

MediaTek, Inc. MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390 Published: (1 year ago)

Description

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752; Issue ID: MSV-2434.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
google android 12.0
linuxfoundation yocto 4.0
MediaTek, Inc. MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390 Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1
openwrt openwrt 19.07.0
rdkcentral rdk-b 2022q3

References and patches

CPE matches (NVD) (10)
  • cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rdkcentral:rdk-b:2022q3:*:*:*:*:*:*:*
  • cpe:2.3:a:rdkcentral:rdk-b:2024q1:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
  • cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
  • cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
  • cpe:2.3:o:openwrt:openwrt:22.03.5:*:*:*:*:*:*:*

Recent CVEs in the same product — Android

8.4High
CVE-2026-95405
Google Android

In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. Use…

6.7Medium
CVE-2026-95404
Google Android

In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interact…

8.4High
CVE-2026-95403
Google Android

In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…

7.8High
CVE-2026-95402
Google Android

In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

7.8High
CVE-2026-95401
Google Android

In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

8.4High
CVE-2026-95400
Google Android

In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…