CVE-2025-20788

Summary

In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MT6991, MT8196Android 15.0,affected

Weaknesses

  • CWE-1262: CWE-1262 Improper Access Control for Register Interface

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References