Medium severity6.0NVD Advisory· Published Apr 7, 2025· Updated Jun 17, 2026
CVE-2025-20658
CVE-2025-20658
Description
In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
24- MediaTek, Inc./MT2718, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886, MT6895, MT6897, MT6983, MT6985, MT6989, MT8196, MT8673, MT8676, MT8678, MT8781v5Range: Android 12.0, 13.0, 14.0, 15.0
Patches
Vulnerability mechanics
References
1- corp.mediatek.com/product-security-bulletin/April-2025nvdVendor Advisory
News mentions
0No linked articles in our index yet.