CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20645

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 0.3%

CVSS Severity

CVSS v3 Score 7.8

References

https://corp.mediatek.com/product-security-bulletin/March-2025

Products affected by CVE-2025-20645

Mediatek » Mt6765 » Version: N/A

cpe:2.3:h:mediatek:mt6765:-
Mediatek » Mt6768 » Version: N/A

cpe:2.3:h:mediatek:mt6768:-
Mediatek » Mt6833 » Version: N/A

cpe:2.3:h:mediatek:mt6833:-
Mediatek » Mt6835 » Version: N/A

cpe:2.3:h:mediatek:mt6835:-
Mediatek » Mt6853 » Version: N/A

cpe:2.3:h:mediatek:mt6853:-
Mediatek » Mt6855 » Version: N/A

cpe:2.3:h:mediatek:mt6855:-
Mediatek » Mt6879 » Version: N/A

cpe:2.3:h:mediatek:mt6879:-
Mediatek » Mt6886 » Version: N/A

cpe:2.3:h:mediatek:mt6886:-
Mediatek » Mt6893 » Version: N/A

cpe:2.3:h:mediatek:mt6893:-
Mediatek » Mt6897 » Version: N/A

cpe:2.3:h:mediatek:mt6897:-
Mediatek » Mt6983 » Version: N/A

cpe:2.3:h:mediatek:mt6983:-
Mediatek » Mt6985 » Version: N/A

cpe:2.3:h:mediatek:mt6985:-
Mediatek » Mt6989 » Version: N/A

cpe:2.3:h:mediatek:mt6989:-
Mediatek » Mt8796 » Version: N/A

cpe:2.3:h:mediatek:mt8796:-
Google » Android » Version: 14.0

cpe:2.3:o:google:android:14.0
Google » Android » Version: 15.0

cpe:2.3:o:google:android:15.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20645

Products

Pricing

Contact Us