VYPR
Medium severity6.0NVD Advisory· Published Apr 7, 2025· Updated Jun 17, 2026

CVE-2025-20658

CVE-2025-20658

Description

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

24
  • cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
  • cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
  • Google/Android4 versions
    cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*
    • cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*
    • cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
  • Mediatek/dallm-fuzzy
  • MediaTek, Inc./MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781v5
    Range: Android 12.0, 13.0, 14.0, 15.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.