Out of Bounds Write Vulnerability in MediaTek V6 DA
CVE-2025-20635

6.6MEDIUM

Key Information:

Vendor
MediaTek
Status
Mt2737, Mt6781, Mt6789, Mt6835, Mt6855, Mt6878, Mt6879, Mt6880, Mt6886, Mt6890, Mt6895, Mt6897, Mt6980, Mt6983, Mt6985, Mt6989, Mt6990, Mt8370, Mt8390
Vendor
CVE Published:
3 February 2025

Summary

In the MediaTek V6 DA, a vulnerability exists that allows for an out of bounds write due to a lack of appropriate bounds checking. An attacker with physical access to the device can exploit this flaw to escalate privileges locally, requiring no additional execution privileges. The exploitation necessitates user interaction, making it essential for users to remain vigilant regarding device security and updates.

Affected Version(s)

MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390 Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1

References

https://corp.mediatek.com/product-security-bulletin/Febru...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.