CVE-2025-20798

HIGH · 7.8 CVSS Gepubliceerd: 06-01-2026 CWE-787

Beschrijving

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5533.

Vendors

Google Mediatek

Affected products

Android Mt2718 Mt6765 Mt6768 Mt6781 Mt6833 Mt6835 Mt6853 Mt6855 Mt6877 Mt6879 Mt6893 Mt6985 Mt6989 Mt6991 Mt8186 Mt8188 Mt8196 Mt8367 Mt8391 Mt8676 Mt8678 Mt8696 Mt8766 Mt8768 Mt8781 Mt8786 Mt8788e Mt8791t Mt8792 Mt8793 Mt8796 Mt8873 Mt8883 Mt8893

References

corp.mediatek.com