← Database

CVE-2025-20648

MEDIUM CVSS: 5.5 Published: 2025-03-03 Modified: 2026-06-17

Description

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.

Affected Platforms

Google AndroidMediatek Mt6879Mediatek Mt8390Mediatek Mt8678Mediatek Mt8673Mediatek Mt6989Mediatek Mt8395Mediatek Mt8196Mediatek Mt8370Mediatek Mt2718

Weakness Type

CWE-125, CWE-125

References