CVE-2025-20768

HighCVSS 7.8/10Last modified Oct 18, 2026

Description

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
MediaTek, Inc.MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991Android 14.0, 15.0, 16.0

References

Timeline

Published
Dec 2, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-207696.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-20776.1The Simple Amazon Affiliate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in all versions up CVE-2025-207706.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207716.7In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege iCVE-2025-207726.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207736.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207746.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207756.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207766.7In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliCVE-2025-207776.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207787.8In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207797.0In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious acto
CVE-2025-20768: High severity, CVSS 7.8 | Vulnix