CVE-2025-20766

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4820.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-457

Affected software

VendorProductVersions
MediaTek, Inc.MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, Android 14.0, 15.0, 16.0

References

Timeline

Published
Dec 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-207677.8In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a maliciCVE-2025-207687.8In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliCVE-2025-207696.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-20776.1The Simple Amazon Affiliate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in all versions up CVE-2025-207706.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207716.7In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege iCVE-2025-207726.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207736.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207746.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207756.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207766.7In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliCVE-2025-207776.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal