Out of Bounds Write Vulnerability in Mediatek Secmem
CVE-2025-20636

6.7MEDIUM

Key Information:

Vendor
MediaTek
Status
Mt6580, Mt6739, Mt6761, Mt6765, Mt6768, Mt6779, Mt6781, Mt6785, Mt6789, Mt6833, Mt6835, Mt6853, Mt6855, Mt6873, Mt6877, Mt6879, Mt6883, Mt6885, Mt6886, Mt6889, Mt6893, Mt6895, Mt6983, Mt6985, Mt8321, Mt8385, Mt8666, Mt8667, Mt8673, Mt8755, Mt8765, Mt8766, Mt8768, Mt8771, Mt8775, Mt8781, Mt8786, Mt8788, Mt8789, Mt8791t, Mt8795t, Mt8796, Mt8797, Mt8798
Vendor
CVE Published:
3 February 2025

Summary

A potential vulnerability has been identified in Mediatek's Secmem where an out of bounds write can occur due to a missing bounds check. This flaw could enable a malicious actor, who has already acquired System privileges, to escalate their privileges further. Notably, user interaction is not required for exploitation, posing a significant risk. Immediate attention and patching are recommended to mitigate potential threats. The relevant patch is identified as ALPS09403554 under Issue ID: MSV-2431.

Affected Version(s)

MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8385, MT8666, MT8667, MT8673, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8796, MT8797, MT8798 Android 12.0, 13.0, 14.0, 15.0

References

https://corp.mediatek.com/product-security-bulletin/Febru...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.