Memory Corruption Vulnerability in c2ps by MediaTek

CVE-2025-20799

What is CVE-2025-20799?

The c2ps component by MediaTek contains a vulnerability that can lead to memory corruption due to a use-after-free condition. This issue can allow an attacker, who has already gained system privileges, to escalate their access levels without requiring user interaction. As a result, if properly exploited, this vulnerability can significantly compromise the integrity and security of the affected systems. To mitigate this risk, it's crucial to apply the patch identified as ALPS10274607 without delay.

References