VDB

CVE-2025-20769

CVE-2025-20769 PUBLISHED CVSS 3.4000000953674316 LOW

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4804.

EPSS 0.08% · 0.2th percentile

Risk Scores

CVSS 3.1
3.4000000953674316
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.08%
0.2th percentile

Affected Products

VendorProductVersions
googleandroid14.0, 15.0, 16.0
MediaTek, Inc.MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793*

Timeline

  • Nov 1, 2024 CVE ID Reserved
  • Dec 2, 2025 EPSS Score
  • Dec 2, 2025 CVE Published
  • Dec 6, 2025 EPSS Score
  • Dec 11, 2025 EPSS Score
  • Dec 15, 2025 EPSS Score
  • Dec 20, 2025 EPSS Score
  • Dec 24, 2025 EPSS Score
  • Dec 29, 2025 EPSS Score
  • Jan 2, 2026 EPSS Score
  • Jan 7, 2026 EPSS Score
  • Jan 11, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›