LOW🇵🇱 Wersja polska

CVE-2025-20643

CVSS 3.9v3.1pub. 2025-02-03upd. 2025-02-04

In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2056.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

  • Google Android

    OS
    Google
    12.013.014.015.0

  • Mediatek Mt6739

    HW
    Mediatek
    all versions

  • Mediatek Mt6761

    HW
    Mediatek
    all versions

  • Mediatek Mt6765

    HW
    Mediatek
    all versions

  • Mediatek Mt6768

    HW
    Mediatek
    all versions

  • Mediatek Mt6771

    HW
    Mediatek
    all versions

  • Mediatek Mt6779

    HW
    Mediatek
    all versions

  • Mediatek Mt6781

    HW
    Mediatek
    all versions

  • Mediatek Mt6785

    HW
    Mediatek
    all versions

  • Mediatek Mt6833

    HW
    Mediatek
    all versions

  • Mediatek Mt6853

    HW
    Mediatek
    all versions

  • Mediatek Mt6873

    HW
    Mediatek
    all versions

  • Mediatek Mt6877

    HW
    Mediatek
    all versions

  • Mediatek Mt6885

    HW
    Mediatek
    all versions

  • Mediatek Mt6893

    HW
    Mediatek
    all versions

  • Mediatek Mt8167

    HW
    Mediatek
    all versions

  • Mediatek Mt8167s

    HW
    Mediatek
    all versions

  • Mediatek Mt8175

    HW
    Mediatek
    all versions

  • Mediatek Mt8185

    HW
    Mediatek
    all versions

  • Mediatek Mt8195

    HW
    Mediatek
    all versions

  • Mediatek Mt8321

    HW
    Mediatek
    all versions

  • Mediatek Mt8362a

    HW
    Mediatek
    all versions

  • Mediatek Mt8365

    HW
    Mediatek
    all versions

  • Mediatek Mt8385

    HW
    Mediatek
    all versions

  • Mediatek Mt8395

    HW
    Mediatek
    all versions

  • Mediatek Mt8666

    HW
    Mediatek
    all versions

  • Mediatek Mt8667

    HW
    Mediatek
    all versions

  • Mediatek Mt8673

    HW
    Mediatek
    all versions

  • Mediatek Mt8675

    HW
    Mediatek
    all versions

  • Mediatek Mt8678

    HW
    Mediatek
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-16010CRITICAL9.6⚠ KEVPL ✓same product

Heap buffer overflow w Google Chrome na Android — sandbox escape

CVE-2016-1019CRITICAL9.8⚠ KEVPL ✓same product

Adobe Flash Player — RCE lub DoS przez nieokreślone wektory ataku

CVE-2026-78937CRITICAL9.6same product

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker lever...

CVE-2026-79129CRITICAL9.6same product

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker lev...

CVE-2026-79152CRITICAL9.8same product

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local at...