6.6

CVE-2025-20635

EPSS 0.01%
Veröffentlicht 03.02.2025 04:15:08
Zuletzt bearbeitet 13.03.2025 20:15:25
Quelle security@mediatek.com
Teams Watchlist Login
Unerledigt Login

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752; Issue ID: MSV-2434.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linuxfoundation ≫ Yocto Version4.0

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Rdkcentral ≫ Rdk-b Version2022q3

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Rdkcentral ≫ Rdk-b Version2024q1

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Google ≫ Android Version12.0

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Google ≫ Android Version13.0

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Google ≫ Android Version14.0

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Google ≫ Android Version15.0

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Openwrt ≫ Openwrt Version19.07.0 Update-

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Openwrt ≫ Openwrt Version21.02.0 Update-

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Openwrt ≫ Openwrt Version22.03.5

   Mediatek ≫ Mt2737 Version-
   Mediatek ≫ Mt6781 Version-
   Mediatek ≫ Mt6789 Version-
   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6855 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6879 Version-
   Mediatek ≫ Mt6880 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6890 Version-
   Mediatek ≫ Mt6895 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6980 Version-
   Mediatek ≫ Mt6983 Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt8370 Version-
   Mediatek ≫ Mt8390 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.015

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.6	0.7	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.6	0.7	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/February-2025

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20635

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20635

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20635

EUVD