Skip to content
Sign in
6.7 Medium

CVE-2025-20774 In display, there is a possible out of bounds write due to a missing bounds check

Description

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4796.

Affected products and versions

Product Affected versions Fixed in
MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793 Versions not published

Other CVEs of MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793

The 8 CVEs of MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8196, MT8676, MT8678, MT8792, MT8793 →
CVE-2025-20773 In display, there is a possible memory corruption due to use after free 6.7 Medium CVE-2025-20772 In display, there is a possible memory corruption due to use after free 6.7 Medium CVE-2025-20771 In display, there is a possible escalation of privilege due to improper input validation 6.7 Medium CVE-2025-20770 In display, there is a possible memory corruption due to use after free 6.7 Medium
Track this CVE