VDB

CVE-2025-20801

CVE-2025-20801 PUBLISHED CVSS 7.5 HIGH

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210; Issue ID: MSV-4926.

EPSS 0.06% · 0.0th percentile

Risk Scores

CVSS 4.0
7.5
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.06%
0.0th percentile

Affected Products

VendorProductVersions
googleandroid13.0, 14.0, 15.0
MediaTek, Inc.MediaTek chipsetMT6878, MT6897, MT6899

Timeline

  • Nov 1, 2024 CVE ID Reserved
  • Jan 6, 2026 EPSS Score
  • Jan 6, 2026 CVE Published
  • Jan 6, 2026 PoC Published
  • Jan 9, 2026 EPSS Score
  • Jan 13, 2026 EPSS Score
  • Jan 16, 2026 EPSS Score
  • Jan 19, 2026 EPSS Score
  • Jan 23, 2026 EPSS Score
  • Jan 26, 2026 EPSS Score
  • Jan 29, 2026 EPSS Score
  • Feb 2, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›