7

CVE-2025-20801

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210; Issue ID: MSV-4926.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version 13.0
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6899 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt6993 Version -
   Mediatek ≫ Mt8792 Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8798 Version -
Google ≫ Android Version 14.0
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6899 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt6993 Version -
   Mediatek ≫ Mt8792 Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8798 Version -
Google ≫ Android Version 15.0
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6899 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt6993 Version -
   Mediatek ≫ Mt8792 Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8798 Version -
Google ≫ Android Version 16.0 Update -
   Mediatek ≫ Mt6878 Version -
   Mediatek ≫ Mt6897 Version -
   Mediatek ≫ Mt6899 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt6993 Version -
   Mediatek ≫ Mt8792 Version -
   Mediatek ≫ Mt8796 Version -
   Mediatek ≫ Mt8798 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

CWE-415 Double Free

The product calls free() twice on the same memory address.

https://corp.mediatek.com/product-security-bulletin/January-2026
Vendor Advisory