CVE-2025-20641 | Vulnetix

CVE-2025-20641 PUBLISHED CVSS 7.300000190734863 HIGH

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2058.

EPSS 0.09% · 0.4th percentile

Risk Scores

CVSS 3.1

7.300000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

EPSS Score

0.09%

0.4th percentile

Affected Products

Vendor	Product	Versions
MediaTek, Inc.	MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893	Android 12.0, 13.0, 14.0, 15.0
google	android	12.0, 13.0, 14.0

Timeline

Nov 1, 2024 CVE ID Reserved
Feb 3, 2025 EPSS Score
Feb 3, 2025 CVE Published
Feb 3, 2025 PoC Published
Feb 3, 2025 PoC Published
Feb 3, 2025 CVE Updated
Feb 9, 2025 Coalition ESS Score
Feb 18, 2025 EPSS Score
Mar 4, 2025 Coalition ESS Score
Mar 5, 2025 EPSS Score
Mar 20, 2025 EPSS Score
Apr 4, 2025 EPSS Score

References

Open in Interactive Console →