CVE-2025-20768 | Vulnetix

CVE-2025-20768 PUBLISHED CVSS 7.800000190734863 HIGH

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805.

EPSS 0.08% · 0.3th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.08%

0.3th percentile

Affected Products

Vendor	Product	Versions
MediaTek, Inc.	MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991	Android 14.0, 15.0, 16.0
google	android	15.0, 16.0, 14.0

Timeline

Nov 1, 2024 CVE ID Reserved
Dec 2, 2025 EPSS Score
Dec 2, 2025 CVE Published
Dec 2, 2025 PoC Published
Dec 6, 2025 EPSS Score
Dec 11, 2025 EPSS Score
Dec 15, 2025 EPSS Score
Dec 20, 2025 EPSS Score
Dec 24, 2025 EPSS Score
Dec 29, 2025 EPSS Score
Jan 2, 2026 EPSS Score
Jan 7, 2026 EPSS Score

References

Open in Interactive Console →