CVE-2025-20640

In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2059.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/February-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:12.0:::::::*
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:google:android:15.0:::::::*

OR	cpe:2.3:h:mediatek:mt6739:-:::::::*
	cpe:2.3:h:mediatek:mt6761:-:::::::*
	cpe:2.3:h:mediatek:mt6765:-:::::::*
	cpe:2.3:h:mediatek:mt6768:-:::::::*
	cpe:2.3:h:mediatek:mt6771:-:::::::*
	cpe:2.3:h:mediatek:mt6779:-:::::::*
	cpe:2.3:h:mediatek:mt6781:-:::::::*
	cpe:2.3:h:mediatek:mt6785:-:::::::*
	cpe:2.3:h:mediatek:mt6833:-:::::::*
	cpe:2.3:h:mediatek:mt6853:-:::::::*
	cpe:2.3:h:mediatek:mt6873:-:::::::*
	cpe:2.3:h:mediatek:mt6877:-:::::::*
	cpe:2.3:h:mediatek:mt6885:-:::::::*
	cpe:2.3:h:mediatek:mt6893:-:::::::*
	cpe:2.3:h:mediatek:mt8167:-:::::::*
	cpe:2.3:h:mediatek:mt8167s:-:::::::*
	cpe:2.3:h:mediatek:mt8175:-:::::::*
	cpe:2.3:h:mediatek:mt8185:-:::::::*
	cpe:2.3:h:mediatek:mt8195:-:::::::*
	cpe:2.3:h:mediatek:mt8321:-:::::::*
	cpe:2.3:h:mediatek:mt8362a:-:::::::*
	cpe:2.3:h:mediatek:mt8365:-:::::::*
	cpe:2.3:h:mediatek:mt8385:-:::::::*
	cpe:2.3:h:mediatek:mt8395:-:::::::*
	cpe:2.3:h:mediatek:mt8666:-:::::::*
	cpe:2.3:h:mediatek:mt8667:-:::::::*
	cpe:2.3:h:mediatek:mt8673:-:::::::*
	cpe:2.3:h:mediatek:mt8675:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*
	cpe:2.3:h:mediatek:mt8765:-:::::::*
	cpe:2.3:h:mediatek:mt8766:-:::::::*
	cpe:2.3:h:mediatek:mt8768:-:::::::*
	cpe:2.3:h:mediatek:mt8771:-:::::::*
	cpe:2.3:h:mediatek:mt8775:-:::::::*
	cpe:2.3:h:mediatek:mt8781:-:::::::*
	cpe:2.3:h:mediatek:mt8786:-:::::::*
	cpe:2.3:h:mediatek:mt8788:-:::::::*
	cpe:2.3:h:mediatek:mt8789:-:::::::*
	cpe:2.3:h:mediatek:mt8791t:-:::::::*
	cpe:2.3:h:mediatek:mt8795t:-:::::::*
	cpe:2.3:h:mediatek:mt8797:-:::::::*
	cpe:2.3:h:mediatek:mt8798:-:::::::*
	cpe:2.3:h:mediatek:mt8893:-:::::::*

History

04 Feb 2025, 15:22

Type	Values Removed	Values Added
Summary		(es) En DA, existe una posible lectura fuera de los límites debido a un neutra. Esto podría provocar la divulgación de información local, si un atacante tiene acceso físico al dispositivo, sin necesidad de privilegios de ejecución adicionales. Se necesita la interacción del usuario para la explotación. ID de parche: ALPS09291146; ID de problema: MSV-2059.
CVSS	v2 : ~~unknown~~ v3 : ~~6.2~~	v2 : unknown v3 : 4.3
CPE		cpe:2.3:h:mediatek:mt6765:-:::::::* cpe:2.3:h:mediatek:mt6877:-:::::::* cpe:2.3:h:mediatek:mt6739:-:::::::* cpe:2.3:h:mediatek:mt8893:-:::::::* cpe:2.3:h:mediatek:mt6781:-:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:h:mediatek:mt8791t:-:::::::* cpe:2.3:h:mediatek:mt6779:-:::::::* cpe:2.3:h:mediatek:mt6853:-:::::::* cpe:2.3:h:mediatek:mt6833:-:::::::* cpe:2.3:h:mediatek:mt8786:-:::::::* cpe:2.3:h:mediatek:mt8175:-:::::::* cpe:2.3:h:mediatek:mt8167s:-:::::::* cpe:2.3:h:mediatek:mt8167:-:::::::* cpe:2.3:h:mediatek:mt8185:-:::::::* cpe:2.3:h:mediatek:mt8365:-:::::::* cpe:2.3:h:mediatek:mt8771:-:::::::* cpe:2.3:h:mediatek:mt6768:-:::::::* cpe:2.3:h:mediatek:mt8788:-:::::::* cpe:2.3:h:mediatek:mt8673:-:::::::* cpe:2.3:h:mediatek:mt8765:-:::::::* cpe:2.3:o:google:android:12.0:::::::* cpe:2.3:h:mediatek:mt8362a:-:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt8385:-:::::::* cpe:2.3:h:mediatek:mt8798:-:::::::* cpe:2.3:h:mediatek:mt6893:-:::::::* cpe:2.3:h:mediatek:mt8667:-:::::::* cpe:2.3:h:mediatek:mt6761:-:::::::* cpe:2.3:h:mediatek:mt6873:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:h:mediatek:mt8775:-:::::::* cpe:2.3:h:mediatek:mt8766:-:::::::* cpe:2.3:h:mediatek:mt8321:-:::::::* cpe:2.3:h:mediatek:mt8675:-:::::::* cpe:2.3:h:mediatek:mt6771:-:::::::* cpe:2.3:h:mediatek:mt8768:-:::::::* cpe:2.3:h:mediatek:mt8395:-:::::::* cpe:2.3:h:mediatek:mt8195:-:::::::* cpe:2.3:h:mediatek:mt6885:-:::::::* cpe:2.3:h:mediatek:mt8789:-:::::::* cpe:2.3:h:mediatek:mt8795t:-:::::::* cpe:2.3:o:google:android:15.0:::::::* cpe:2.3:h:mediatek:mt6785:-:::::::* cpe:2.3:h:mediatek:mt8781:-:::::::* cpe:2.3:h:mediatek:mt8797:-:::::::* cpe:2.3:h:mediatek:mt8666:-:::::::*
References	~~() https://corp.mediatek.com/product-security-bulletin/February-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/February-2025 - Vendor Advisory
First Time		Mediatek mt8791t Mediatek mt8771 Mediatek mt8765 Mediatek mt8321 Mediatek mt6893 Mediatek mt8362a Mediatek mt6877 Mediatek mt8893 Mediatek mt8797 Mediatek mt8678 Mediatek mt8673 Mediatek mt6873 Mediatek mt8675 Mediatek mt8768 Mediatek mt6771 Mediatek mt8167s Mediatek mt6779 Mediatek mt8788 Mediatek mt8781 Mediatek mt8766 Google Mediatek Mediatek mt8395 Mediatek mt6768 Mediatek mt8195 Mediatek mt6785 Google android Mediatek mt8667 Mediatek mt8666 Mediatek mt8775 Mediatek mt8385 Mediatek mt8175 Mediatek mt8798 Mediatek mt8795t Mediatek mt6739 Mediatek mt6833 Mediatek mt6781 Mediatek mt8365 Mediatek mt6853 Mediatek mt6765 Mediatek mt6885 Mediatek mt6761 Mediatek mt8789 Mediatek mt8786 Mediatek mt8167 Mediatek mt8185

03 Feb 2025, 18:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.2

03 Feb 2025, 04:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-03 04:15

Updated : 2025-02-04 15:22

NVD link : CVE-2025-20640

Mitre link : CVE-2025-20640

CVE.ORG link : CVE-2025-20640

JSON object : View

Products Affected

mediatek

mt8771
mt6885
mt8766
mt8362a
mt8797
mt8768
mt8781
mt8195
mt6765
mt8385
mt6739
mt8185
mt6779
mt8321
mt6771
mt8786
mt6781
mt6768
mt8765
mt8175
mt8678
mt8395
mt6877
mt6833
mt8167s
mt8893
mt8775
mt8788
mt8675
mt8167
mt6893
mt6853
mt8666
mt8791t
mt8365
mt8795t
mt8789
mt6785
mt6873
mt8667
mt8673
mt6761
mt8798

google

android

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2025-20640", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.7}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 0.7}]}, "published": "2025-02-03T04:15:09.093", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/February-2025", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@mediatek.com", "description": [{"lang": "en", "value": "CWE-125"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2059."}, {"lang": "es", "value": "En DA, existe una posible lectura fuera de los l\u00edmites debido a un neutra. Esto podr\u00eda provocar la divulgaci\u00f3n de informaci\u00f3n local, si un atacante tiene acceso f\u00edsico al dispositivo, sin necesidad de privilegios de ejecuci\u00f3n adicionales. Se necesita la interacci\u00f3n del usuario para la explotaci\u00f3n. ID de parche: ALPS09291146; ID de problema: MSV-2059."}], "lastModified": "2025-02-04T15:22:56.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"}, {"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469"}, {"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D"}, {"criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"}, {"criteria": "cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F726F486-A86F-4215-AD93-7A07A071844A"}, {"criteria": "cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "43E779F6-F0A0-4153-9A1D-B715C3A2F80E"}, {"criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F"}, {"criteria": "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BE4D2AED-C713-407F-A34A-52C3D8F65835"}, {"criteria": "cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EBA369B8-8E23-492B-82CC-23114E6A5D1C"}, {"criteria": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C4EEE021-6B2A-47A0-AC6B-55525A40D718"}, {"criteria": "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A82E0A4F-072F-474C-B94C-8114ABE05639"}, {"criteria": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9814939B-F05E-4870-90C0-7C0F6BAAEB39"}, {"criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB"}, {"criteria": "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B"}, {"criteria": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"}, {"criteria": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DD64413C-C774-4C4F-9551-89E1AA9469EE"}, {"criteria": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "213B5C7F-D965-4312-9CDF-4F06FA77D401"}, {"criteria": "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B5FE245-6346-4078-A3D0-E5F79BB636B8"}, {"criteria": "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "639C5BDE-2E83-427A-BAB7-85EA9348AC68"}, {"criteria": "cpe:2.3:h:mediatek:mt8175:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "582F1041-CD84-4763-AD6F-E08DD11F689F"}, {"criteria": "cpe:2.3:h:mediatek:mt8185:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62FDE8E0-FD9F-4D2B-944C-E17F34A09F06"}, {"criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6"}, {"criteria": "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "793B7F88-79E7-4031-8AD0-35C9BFD073C4"}, {"criteria": "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"}, {"criteria": "cpe:2.3:h:mediatek:mt8365:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "97C76F98-5D8D-4E52-ABAF-CD27C1205B0E"}, {"criteria": "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "299378ED-41CE-4966-99B1-65D2BA1215EF"}, {"criteria": "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"}, {"criteria": "cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6C9AB4D2-0EDD-4D5E-9393-F535CA2F24C4"}, {"criteria": "cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2FE14B46-C1CA-465F-8578-059FA2ED30EB"}, {"criteria": "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "152F6606-FA23-4530-AA07-419866B74CB3"}, {"criteria": "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "03E6123A-7603-4EAB-AFFB-229E8A040709"}, {"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"}, {"criteria": "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AACF35D-27E0-49AF-A667-13585C8B8071"}, {"criteria": "cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CE45F606-2E75-48BC-9D1B-99D504974CBF"}, {"criteria": "cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1CC6E254-11A9-49CE-83FE-6DAC23E7D7AA"}, {"criteria": "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0D09F23D-D023-4A60-B426-61251FDD8A5A"}, {"criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF"}, {"criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41"}, {"criteria": "cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D2D5F91-6AAB-4516-AD01-5C60F58BA4A6"}, {"criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220"}, {"criteria": "cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1505AD53-987E-4328-8E1D-F5F1EC12B677"}, {"criteria": "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1BB05B1D-77C9-4E42-91AD-9F087413DC20"}, {"criteria": "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "78D4E9E1-B044-41EC-BE98-22DC0E5E9010"}, {"criteria": "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2B469BF4-5961-42E9-814B-1BE06D182E45"}, {"criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8"}, {"criteria": "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}

4.3 /10