VDB

CVE-2025-20765

CVE-2025-20765 PUBLISHED CVSS 4.699999809265137 MEDIUM

In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.

EPSS 0.08% · 0.1th percentile

Risk Scores

CVSS 3.1
4.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.08%
0.1th percentile

Affected Products

VendorProductVersions
MediaTek, Inc.MT2718, MT2737, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6893, MT6895, MT6897, MT6899, MT6980D, MT6983, MT6985, MT6989, MT6990, MT6991, MT8113, MT8115, MT8139, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8512, MT8516, MT8518, MT8519, MT8532, MT8676, MT8678, MT8695, MT8696, MT8698*
openwrtopenwrt21.02.0, 23.05.0
linuxfoundationyocto4.0
googleandroid14.0, 15.0, 16.0

Timeline

  • Nov 1, 2024 CVE ID Reserved
  • Dec 2, 2025 EPSS Score
  • Dec 2, 2025 CVE Published
  • Dec 2, 2025 PoC Published
  • Dec 6, 2025 EPSS Score
  • Dec 11, 2025 EPSS Score
  • Dec 15, 2025 EPSS Score
  • Dec 20, 2025 EPSS Score
  • Dec 24, 2025 EPSS Score
  • Dec 29, 2025 EPSS Score
  • Jan 2, 2026 EPSS Score
  • Jan 7, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›