Skip to content
Sign in
4.2 Medium

CVE-2025-20744 In pda, there is a possible escalation of privilege due to use after free

Description

In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitable with local access to the machine, with an administrator account and without any user action; the impact on data or service is limited.

Attack vector
Local
Attack complexity
Low
Privileges required
High
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
MT6899, MT6991, MT8793 Versions not published

Other CVEs of MT6899, MT6991, MT8793

The 5 CVEs of MT6899, MT6991, MT8793 →
CVE-2025-20807 In dpe, there is a possible out of bounds write due to an integer overflow 6.7 Medium CVE-2025-20806 In dpe, there is a possible memory corruption due to use after free 6.7 Medium CVE-2025-20805 In dpe, there is a possible memory corruption due to use after free 6.7 Medium CVE-2025-20803 In dpe, there is a possible memory corruption due to an integer overflow 6.7 Medium
Track this CVE