CVE-2025-20774

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4796.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

VendorProductVersions
MediaTek, Inc.MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, Android 14.0, 15.0, 16.0

References

Timeline

Published
Dec 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-207756.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207766.7In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a maliCVE-2025-207776.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207787.8In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207797.0In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actoCVE-2025-20784.8The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and inclCVE-2025-207807.8In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207817.8In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2025-207826.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207836.7In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207846.7In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a maliciousCVE-2025-207856.7In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious act
CVE-2025-20774: Medium severity, CVSS 6.7 | Vulnix