Out of Bounds Write Vulnerability in imgsensor by MediaTek

CVE-2025-20721

What is CVE-2025-20721?

The imgsensor component from MediaTek is affected by a vulnerability that arises from a missing bounds check, enabling a potential out of bounds write. A malicious actor with System privileges could exploit this weakness to escalate their privileges locally. Notably, user interaction is not required for successful exploitation. The issue highlights the importance of proper input validation to prevent such vulnerabilities. Affected versions include certain iterations of imgsensor, which should be patched to mitigate the risks involved.

References