Out of Bounds Write Vulnerability in MediaTek's dpe Component

CVE-2025-20807

What is CVE-2025-20807?

The dpe component in MediaTek systems contains a vulnerability that allows for an out of bounds write stemming from an integer overflow. This imperfection can be exploited by a malicious actor who has already gained System privileges, leading to local privilege escalation without the need for user interaction. Users are urged to apply patch ID ALPS10114841 to mitigate this issue.

References