Memory Corruption Vulnerability in MediaTek Products
CVE-2025-20801

7HIGH

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
6 January 2026

What is CVE-2025-20801?

In the seninf component of MediaTek, a memory corruption vulnerability exists due to a race condition, which may allow an attacker with system privileges to escalate their privileges without requiring user interaction. This vulnerability emphasizes the importance of applying the latest patches to safeguard systems against potential exploits. The specific patch ID addressing this issue is ALPS10251210, associated with issue ID MSV-4926.

Affected Version(s)

MediaTek chipset MT6878

MediaTek chipset MT6897

MediaTek chipset MT6899

References

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.