CVE-2025-20722

EPSS 0.09%
Veröffentlicht 14.10.2025 09:11:48
Zuletzt bearbeitet 15.10.2025 18:45:07
Erkennungen
Login

In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 5 VulnDex Vulnerability Enrichment 16

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rdkcentral ≫ Rdk-b Version 2024q1

   Mediatek ≫ Mt6835 Version -
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6886 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6899 Version -
   Mediatek ≫ Mt6980d Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt8676 Version -
   Mediatek ≫ Mt8678 Version -
   Mediatek ≫ Mt8775 Version -
   Mediatek ≫ Mt8791t Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8873 Version -

Google ≫ Android Version 14.0

Google ≫ Android Version 15.0

Openwrt ≫ Openwrt Version 21.02.0 Update -

Openwrt ≫ Openwrt Version 23.05

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.004

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://corp.mediatek.com/product-security-bulletin/October-2025

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20722

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20722

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20722

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-20722