CVE-2025-20658 - Vulnerability Details

Vendors	Products
Google	Android
Mediatek	Mt2718 Mt6781 Mt6789 Mt6835 Mt6855 Mt6878 Mt6879 Mt6886 Mt6895 Mt6897 Mt6983 Mt6985 Mt6989 Mt8196 Mt8673 Mt8676 Mt8678 Mt8781

Link	Providers
https://corp.mediatek.com/product-security-bulletin/April-2025

Type	Values Removed	Values Added
First Time appeared		Google Google android Mediatek Mediatek mt2718 Mediatek mt6781 Mediatek mt6789 Mediatek mt6835 Mediatek mt6855 Mediatek mt6878 Mediatek mt6879 Mediatek mt6886 Mediatek mt6895 Mediatek mt6897 Mediatek mt6983 Mediatek mt6985 Mediatek mt6989 Mediatek mt8196 Mediatek mt8673 Mediatek mt8676 Mediatek mt8678 Mediatek mt8781
CPEs		cpe:2.3:h:mediatek:mt2718:-:::::::* cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:h:mediatek:mt6789:-:::::::* cpe:2.3:h:mediatek:mt6835:-:::::::* cpe:2.3:h:mediatek:mt6855:-:::::::* cpe:2.3:h:mediatek:mt6878:-:::::::* cpe:2.3:h:mediatek:mt6879:-:::::::* cpe:2.3:h:mediatek:mt6886:-:::::::* cpe:2.3:h:mediatek:mt6895:-:::::::* cpe:2.3:h:mediatek:mt6897:-:::::::* cpe:2.3:h:mediatek:mt6983:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt8196:-:::::::* cpe:2.3:h:mediatek:mt8673:-:::::::* cpe:2.3:h:mediatek:mt8676:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:h:mediatek:mt8781:-:::::::* cpe:2.3:o:google:android:12.0:-:::::: cpe:2.3:o:google:android:13.0:-:::::: cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:o:google:android:15.0:::::::*
Vendors & Products		Google Google android Mediatek Mediatek mt2718 Mediatek mt6781 Mediatek mt6789 Mediatek mt6835 Mediatek mt6855 Mediatek mt6878 Mediatek mt6879 Mediatek mt6886 Mediatek mt6895 Mediatek mt6897 Mediatek mt6983 Mediatek mt6985 Mediatek mt6989 Mediatek mt8196 Mediatek mt8673 Mediatek mt8676 Mediatek mt8678 Mediatek mt8781

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597.
Weaknesses		CWE-787
References		https://corp.mediatek.com/product-security-bulletin/April-2025

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-20658", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2024-11-01T01:21:50.367Z", "datePublished": "2025-04-07T03:14:52.452Z", "dateUpdated": "2025-04-07T18:22:01.666Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2025-04-07T03:14:52.452Z"}, "descriptions": [{"lang": "en", "value": "In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781", "versions": [{"version": "Android 12.0, 13.0, 14.0, 15.0", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2025"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-07T14:19:21.779349Z", "id": "CVE-2025-20658", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-07T18:22:01.666Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-20658 (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

state : PUBLISHED (string)

assignerShortName : MediaTek (string)

dateReserved : 2024-11-01T01:21:50.367Z (string)

datePublished : 2025-04-07T03:14:52.452Z (string)

dateUpdated : 2025-04-07T18:22:01.666Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2025-04-07T03:14:52.452Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. (string)

}

]

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781 (string)

versions : [ »

0 : { »

version : Android 12.0, 13.0, 14.0, 15.0 (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2025 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

cweId : CWE-787 (string)

description : CWE-787 Out-of-bounds Write (string)

}

]

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6 (number)

attackVector : PHYSICAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-07T14:19:21.779349Z (string)

id : CVE-2025-20658 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-07T18:22:01.666Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-20658", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-07T14:19:21.779349Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-07T14:20:08.333Z"}}], "cna": {"affected": [{"vendor": "MediaTek, Inc.", "product": "MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781", "versions": [{"status": "affected", "version": "Android 12.0, 13.0, 14.0, 15.0"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/April-2025"}], "descriptions": [{"lang": "en", "value": "In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2025-04-07T03:14:52.452Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20658", "state": "PUBLISHED", "dateUpdated": "2025-04-07T18:22:01.666Z", "dateReserved": "2024-11-01T01:21:50.367Z", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "datePublished": "2025-04-07T03:14:52.452Z", "assignerShortName": "MediaTek"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6 (number)

attackVector : PHYSICAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-20658 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-07T14:19:21.779349Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-07T14:20:08.333Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : MediaTek, Inc. (string)

product : MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781 (string)

versions : [ »

0 : { »

status : affected (string)

version : Android 12.0, 13.0, 14.0, 15.0 (string)

}

]

}

]

references : [ »

0 : { »

url : https://corp.mediatek.com/product-security-bulletin/April-2025 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-787 (string)

description : CWE-787 Out-of-bounds Write (string)

}

]

}

]

providerMetadata : { »

orgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

shortName : MediaTek (string)

dateUpdated : 2025-04-07T03:14:52.452Z (string)

}

cveMetadata : { »

cveId : CVE-2025-20658 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-07T18:22:01.666Z (string)

dateReserved : 2024-11-01T01:21:50.367Z (string)

assignerOrgId : ee979b05-11f8-4f25-a7e0-a1fa9c190374 (string)

datePublished : 2025-04-07T03:14:52.452Z (string)

assignerShortName : MediaTek (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*", "matchCriteriaId": "16820CAF-0A8A-45C8-B5A8-979EA0407389", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*", "matchCriteriaId": "08A26AC2-409E-499A-B0D5-8C2B5038947D", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*", "matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5506327-7DDF-4E88-9EA8-10B8E32F848B", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4EEE021-6B2A-47A0-AC6B-55525A40D718", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*", "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*", "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*", "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*", "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*", "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*", "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*", "matchCriteriaId": "152F6606-FA23-4530-AA07-419866B74CB3", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*", "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB", "vulnerable": true}, {"criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*", "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597."}, {"lang": "es", "value": "En DA, existe una posible omisi\u00f3n de permisos debido a un error l\u00f3gico. Esto podr\u00eda provocar una escalada local de privilegios si un atacante tiene acceso f\u00edsico al dispositivo, sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se requiere la interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS09474894; ID de problema: MSV-2597."}], "id": "CVE-2025-20658", "lastModified": "2025-04-09T15:20:15.973", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 6.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-04-07T04:15:19.703", "references": [{"source": "security@mediatek.com", "tags": ["Vendor Advisory"], "url": "https://corp.mediatek.com/product-security-bulletin/April-2025"}], "sourceIdentifier": "security@mediatek.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "security@mediatek.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 16820CAF-0A8A-45C8-B5A8-979EA0407389 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 08A26AC2-409E-499A-B0D5-8C2B5038947D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2700BCC5-634D-4EC6-AB67-5B678D5F951D (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 8538774C-906D-4B03-A3E7-FA7A55E0DA9E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F5506327-7DDF-4E88-9EA8-10B8E32F848B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C4EEE021-6B2A-47A0-AC6B-55525A40D718 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B9B0D82-82C1-4A77-A016-329B99C45F49 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 19A63103-C708-48EC-B44D-5E465A6B79C5 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 855A8046-34ED-4891-ACE5-76AB10AC8D53 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 704BE5CE-AE08-4432-A8B0-4C8BD62148AD (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AF3E2B84-DAFE-4E11-B23B-026F719475F5 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E0CA45C9-7BFE-4C93-B2AF-B86501F763AB (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A7D8055-F4B6-41EE-A078-11D56285AB66 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AD7DE6B2-66D9-4A3E-B15F-D56505559255 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 152F6606-FA23-4530-AA07-419866B74CB3 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EE302F6F-170E-4350-A8F4-65BE0C50CB78 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 152A5F3D-8004-4649-BDB1-E6F0798AF1CB (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 533284E5-C3AF-48D3-A287-993099DB2E41 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597. (string)

}

1 : { »

lang : es (string)

value : En DA, existe una posible omisión de permisos debido a un error lógico. Esto podría provocar una escalada local de privilegios si un atacante tiene acceso físico al dispositivo, sin necesidad de privilegios de ejecución adicionales. No se requiere la interacción del usuario para la explotación. ID de parche: ALPS09474894; ID de problema: MSV-2597. (string)

}

]

id : CVE-2025-20658 (string)

lastModified : 2025-04-09T15:20:15.973 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : PHYSICAL (string)

availabilityImpact : LOW (string)

baseScore : 6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 0.5 (number)

impactScore : 5.5 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2025-04-07T04:15:19.703 (string)

references : [ »

0 : { »

source : security@mediatek.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://corp.mediatek.com/product-security-bulletin/April-2025 (string)

}

]

sourceIdentifier : security@mediatek.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : security@mediatek.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Physical

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object