VDB
CVE-2025-20650
CVE-2025-20650
PUBLISHED
CVSS 6.800000190734863 MEDIUM
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061.
EPSS 0.11% · 1.4th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
1.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 15.0, 13.0, 14.0 | |
| openwrt | openwrt | 21.02.0, 23.05 |
| rdkcentral | rdk-b | 2022q3, 2024q1 |
| MediaTek, Inc. | MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676, MT8678 | Android 13.0, 14.0, 15.0 / openWRT 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1 |
| linuxfoundation | yocto | 4.0 |
Timeline
- Nov 1, 2024 CVE ID Reserved
- Mar 3, 2025 EPSS Score
- Mar 3, 2025 Coalition ESS Score
- Mar 3, 2025 CVE Published
- Mar 3, 2025 PoC Published
- Mar 4, 2025 Coalition ESS Score
- Mar 17, 2025 EPSS Score
- Mar 31, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- Apr 22, 2025 Coalition ESS Score
- Apr 28, 2025 EPSS Score
- May 12, 2025 EPSS Score