← Database

CVE-2025-20645

HIGH CVSS: 7.8 Published: 2025-03-03 Modified: 2026-06-17

Description

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.

Affected Platforms

Google AndroidMediatek Mt6855Mediatek Mt6879Mediatek Mt6765Mediatek Mt6835Mediatek Mt6833Mediatek Mt6886Mediatek Mt6989Mediatek Mt6768Mediatek Mt6897

Weakness Type

CWE-787, CWE-787

References