CVE-2025-20764 | Vulnetix

CVE-2025-20764 PUBLISHED CVSS 7.800000190734863 HIGH

In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259774; Issue ID: MSV-5029.

EPSS 0.08% · 0.2th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.08%

0.2th percentile

Affected Products

Vendor	Product	Versions
MediaTek, Inc.	MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793, MT8796, MT8873, MT8893	Android 14.0, 15.0, 16.0
google	android	14.0, 15.0, 16.0

Timeline

Nov 1, 2024 CVE ID Reserved
Dec 2, 2025 EPSS Score
Dec 2, 2025 CVE Published
Dec 2, 2025 PoC Published
Dec 6, 2025 EPSS Score
Dec 11, 2025 EPSS Score
Dec 15, 2025 EPSS Score
Dec 20, 2025 EPSS Score
Dec 24, 2025 EPSS Score
Dec 29, 2025 EPSS Score
Jan 2, 2026 EPSS Score
Jan 7, 2026 EPSS Score

References

Open in Interactive Console →