CVE-2025-20656

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

n DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423; Issue ID: MSV-3033.

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/April-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:linuxfoundation:yocto:4.0:::::::*
	cpe:2.3:a:rdkcentral:rdk-b:2024q1:::::::*
	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:google:android:15.0:::::::*
	cpe:2.3:o:openwrt:openwrt:21.02.0:-::::::
	cpe:2.3:o:openwrt:openwrt:23.05:::::::*

OR	cpe:2.3:h:mediatek:mt6781:-:::::::*
	cpe:2.3:h:mediatek:mt6789:-:::::::*
	cpe:2.3:h:mediatek:mt6835:-:::::::*
	cpe:2.3:h:mediatek:mt6855:-:::::::*
	cpe:2.3:h:mediatek:mt6878:-:::::::*
	cpe:2.3:h:mediatek:mt6879:-:::::::*
	cpe:2.3:h:mediatek:mt6886:-:::::::*
	cpe:2.3:h:mediatek:mt6895:-:::::::*
	cpe:2.3:h:mediatek:mt6897:-:::::::*
	cpe:2.3:h:mediatek:mt6983:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt8196:-:::::::*
	cpe:2.3:h:mediatek:mt8370:-:::::::*
	cpe:2.3:h:mediatek:mt8390:-:::::::*

History

09 Apr 2025, 15:29

Type	Values Removed	Values Added
First Time		Mediatek mt6985 Mediatek mt6835 Openwrt Mediatek mt6781 Mediatek mt6990 Mediatek mt6879 Mediatek mt6886 Mediatek mt6855 Openwrt openwrt Mediatek mt6983 Mediatek mt6878 Mediatek mt6897 Google android Mediatek mt6895 Mediatek mt8390 Rdkcentral Linuxfoundation yocto Mediatek mt8196 Google Mediatek mt6989 Rdkcentral rdk-b Mediatek mt6789 Mediatek mt8370 Mediatek Linuxfoundation
References	~~() https://corp.mediatek.com/product-security-bulletin/April-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/April-2025 - Vendor Advisory
CPE		cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:a:rdkcentral:rdk-b:2024q1:::::::* cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6897:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt8390:-:::::::* cpe:2.3:h:mediatek:mt8196:-:::::::* cpe:2.3:h:mediatek:mt6878:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:a:linuxfoundation:yocto:4.0:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt6835:-:::::::* cpe:2.3:o:openwrt:openwrt:23.05:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:o:openwrt:openwrt:21.02.0:-:::::: cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt8370:-:::::::* cpe:2.3:o:google:android:15.0:::::::*

07 Apr 2025, 14:17

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.8
Summary		(es) En DA, existe una posible escritura fuera de los límites debido a la falta de una comprobación de los límites. Esto podría provocar una escalada local de privilegios si un atacante tiene acceso físico al dispositivo, sin necesidad de privilegios de ejecución adicionales. No se requiere la interacción del usuario para su explotación. ID de parche: ALPS09625423; ID de problema: MSV-3033.