CVE-2025-20787

MEDIUM · 6.7 CVSS Gepubliceerd: 06-01-2026 CWE-416

Beschrijving

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658.

Vendors

Google Mediatek

Affected products

Android Mt2718 Mt6739 Mt6761 Mt6765 Mt6768 Mt6781 Mt6789 Mt6833 Mt6835 Mt6853 Mt6855 Mt6877 Mt6878 Mt6879 Mt6883 Mt6885 Mt6886 Mt6889 Mt6893 Mt6895 Mt6897 Mt6899 Mt6983 Mt6985 Mt6989 Mt6991 Mt8196 Mt8676 Mt8678 Mt8796

References

corp.mediatek.com