CVE-2025-20652

CVE-2025-20652

Vendor Mediatek, Inc.
Product MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT876
Weakness CWE-125
Published March 3, 2025
Last update March 4, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052.

Key dates

02Disclosure timeline

March 3, 2025 CVE published
March 4, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-42113 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2024-26172 Windows DWM Core Library Information Disclosure Vulnerability CVE-2024-34126 ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2026-12087 Socket versions before 2.041 for Perl have an out-of-bounds heap read CVE-2022-34239 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability