Out of Bounds Read in MediaTek Products Allows Local Privilege Escalation
CVE-2025-20768
7.8HIGH
Key Information:
What is CVE-2025-20768?
A vulnerability exists in the MediaTek Display products due to a missing bounds check, leading to a potential out of bounds read condition. An attacker with system privileges could exploit this vulnerability to escalate their privileges without requiring user interaction. This poses a significant risk as it allows malicious actors to gain elevated access to the system capabilities, potentially leading to further exploitation.
Affected Version(s)
MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991 Android 14.0, 15.0, 16.0