VDB
CVE-2025-20653
CVE-2025-20653
PUBLISHED
CVSS 6.5 MEDIUM
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046.
EPSS 0.08% · 0.3th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.08%
0.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 13.0, 15.0, 14.0 | |
| MediaTek, Inc. | MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8370, MT8390 | * |
Timeline
- Nov 1, 2024 CVE ID Reserved
- Mar 3, 2025 EPSS Score
- Mar 3, 2025 Coalition ESS Score
- Mar 3, 2025 CVE Published
- Mar 17, 2025 EPSS Score
- Mar 20, 2025 Coalition ESS Score
- Mar 20, 2025 CVE Updated
- Mar 31, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- Apr 28, 2025 EPSS Score
- May 12, 2025 EPSS Score
- May 26, 2025 EPSS Score