Local Privilege Escalation Vulnerability in vdec by MediaTek

CVE-2025-20657

What is CVE-2025-20657?

A vulnerability exists in the vdec component due to improper input validation that allows for permission bypass. This flaw can lead to local privilege escalation, granting malicious individuals the ability to perform unauthorized actions on a system. Notably, exploitation does not require user interaction, making it particularly concerning for systems where the attacker has already gained System privileges. Users are encouraged to apply the provided patch (ALPS09486425) to mitigate potential risks and secure their environments.

References