Memory Corruption Vulnerability in MediaTek Products

CVE-2025-20805

What is CVE-2025-20805?

A vulnerability in MediaTek's dpe product has been identified, which involves potential memory corruption due to use after free. This flaw can be exploited to escalate privileges locally if an attacker has previously acquired System privileges. Notably, no user interaction is required for exploitation. Security patches and detailed resources are available, including Patch ID: ALPS10114696 and Issue ID: MSV-4480.

References