Out of Bounds Read Vulnerability in PlayReady TA by MediaTek
CVE-2025-20660

6.7MEDIUM

Key Information:

Vendor
MediaTek
Status
Vendor
CVE Published:
7 April 2025

Summary

An out of bounds read vulnerability exists in PlayReady TA due to the absence of a proper bounds check. This loophole allows potential local escalation of privilege, assuming the attacker has already gained System privilege. The exploitation does not require user interaction, making it a significant concern for security. Timely application of patches is essential to mitigate the risks associated with this vulnerability, as noted in the Product Security Bulletin by MediaTek.

Affected Version(s)

MT9972 Android 12.0, 14.0

References

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.