CVE-2025-20722

EPSS 0.01%
Veröffentlicht 14.10.2025 09:11:48
Zuletzt bearbeitet 15.10.2025 18:45:07
Quelle security@mediatek.com
CVE-Watchlists
Login
Unerledigt
Login

In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rdkcentral ≫ Rdk-b Version2024q1

   Mediatek ≫ Mt6835 Version-
   Mediatek ≫ Mt6878 Version-
   Mediatek ≫ Mt6886 Version-
   Mediatek ≫ Mt6897 Version-
   Mediatek ≫ Mt6899 Version-
   Mediatek ≫ Mt6980d Version-
   Mediatek ≫ Mt6985 Version-
   Mediatek ≫ Mt6989 Version-
   Mediatek ≫ Mt6990 Version-
   Mediatek ≫ Mt6991 Version-
   Mediatek ≫ Mt8676 Version-
   Mediatek ≫ Mt8678 Version-
   Mediatek ≫ Mt8775 Version-
   Mediatek ≫ Mt8791t Version-
   Mediatek ≫ Mt8796 Version-
   Mediatek ≫ Mt8873 Version-

Google ≫ Android Version14.0

Google ≫ Android Version15.0

Openwrt ≫ Openwrt Version21.02.0 Update-

Openwrt ≫ Openwrt Version23.05

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.003

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://corp.mediatek.com/product-security-bulletin/October-2025

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20722

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20722

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20722

EUVD