7.8
High
CVE-2025-20799 In c2ps, there is a possible memory corruption due to use after free
Description
In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT6899, MT6991, MT6993, MT8793 | Versions not published | |
| MT6899 | Versions not published | |
| MT6991 | Versions not published | |
| MT6993 | Versions not published | |
| MT8793 | Versions not published | |
| MediaTek chipset | Versions not published |