7.8
High
CVE-2025-20795 In KeyInstall, there is a possible out of bounds write due to a missing bounds check
Description
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT2718, MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8186, MT81... | Versions not published | |
| MT2718 | Versions not published | |
| MT6580 | Versions not published | |
| MT6739 | Versions not published | |
| MT6761 | Versions not published | |
| MT6765 | Versions not published | |
| MT6768 | Versions not published | |
| MT6779 | Versions not published | |
| MT6781 | Versions not published |
Show the 47 other branches Hide the 47 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MT6785 | Versions not published | |
| MT6789 | Versions not published | |
| MT6833 | Versions not published | |
| MT6835 | Versions not published | |
| MT6853 | Versions not published | |
| MT6855 | Versions not published | |
| MT6873 | Versions not published | |
| MT6877 | Versions not published | |
| MT6878 | Versions not published | |
| MT6879 | Versions not published | |
| MT6883 | Versions not published | |
| MT6885 | Versions not published | |
| MT6886 | Versions not published | |
| MT6889 | Versions not published | |
| MT6893 | Versions not published | |
| MT6895 | Versions not published | |
| MT6897 | Versions not published | |
| MT6899 | Versions not published | |
| MT6983 | Versions not published | |
| MT6985 | Versions not published | |
| MT6989 | Versions not published | |
| MT6991 | Versions not published | |
| MT8186 | Versions not published | |
| MT8188 | Versions not published | |
| MT8195 | Versions not published | |
| MT8196 | Versions not published | |
| MT8370 | Versions not published | |
| MT8390 | Versions not published | |
| MT8391 | Versions not published | |
| MT8395 | Versions not published | |
| MT8676 | Versions not published | |
| MT8678 | Versions not published | |
| MT8696 | Versions not published | |
| MT8755 | Versions not published | |
| MT8766 | Versions not published | |
| MT8768 | Versions not published | |
| MT8781 | Versions not published | |
| MT8786 | Versions not published | |
| MT8788E | Versions not published | |
| MT8791T | Versions not published | |
| MT8792 | Versions not published | |
| MT8793 | Versions not published | |
| MT8796 | Versions not published | |
| MT8873 | Versions not published | |
| MT8883 | Versions not published | |
| MT8893 | Versions not published | |
| MediaTek chipset | Versions not published |