CVE-2025-20789

Summary

In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117741; Issue ID: MSV-4538.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MT6781, MT6833, MT6853, MT6877, MT6893, MT8196Android 15.0,affected

Weaknesses

  • CWE-201: CWE-201 Information Exposure Through Sent Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References