VDB

CVE-2025-20788

CVE-2025-20788 PUBLISHED CVSS 4.400000095367432 MEDIUM

In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.

EPSS 0.07% · 0.1th percentile

Risk Scores

CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
EPSS Score
0.07%
0.1th percentile

Affected Products

VendorProductVersions
googleandroid15.0
MediaTek, Inc.MT6991, MT8196*

Timeline

  • Nov 1, 2024 CVE ID Reserved
  • Dec 2, 2025 EPSS Score
  • Dec 2, 2025 CVE Published
  • Dec 2, 2025 CVE Updated
  • Dec 6, 2025 EPSS Score
  • Dec 11, 2025 EPSS Score
  • Dec 15, 2025 EPSS Score
  • Dec 20, 2025 EPSS Score
  • Dec 24, 2025 EPSS Score
  • Dec 29, 2025 EPSS Score
  • Jan 2, 2026 EPSS Score
  • Jan 7, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›