VDB
CVE-2025-20745
CVE-2025-20745
PUBLISHED
CVSS 4.199999809265137 MEDIUM
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294.
EPSS 0.08% · 0.1th percentile
Risk Scores
CVSS 3.1
4.199999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.08%
0.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 13.0, 15.0, 14.0 | |
| MediaTek, Inc. | MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920 | Android 13.0, 14.0, 15.0 |
Timeline
- Nov 1, 2024 CVE ID Reserved
- Nov 4, 2025 EPSS Score
- Nov 4, 2025 Coalition ESS Score
- Nov 4, 2025 CVE Published
- Nov 5, 2025 Coalition ESS Score
- Nov 6, 2025 Coalition ESS Score
- Nov 7, 2025 Coalition ESS Score
- Nov 9, 2025 EPSS Score
- Nov 9, 2025 Coalition ESS Score
- Nov 11, 2025 Coalition ESS Score
- Nov 15, 2025 EPSS Score
- Nov 15, 2025 Coalition ESS Score