4.2 Medium

CVE-2025-20745 In apusys, there is a possible memory corruption due to use after free

Description

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294.

Affected products and versions

Product	Affected versions	Fixed in
MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920	Versions not published

Do you use MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920?

Track this CVE Watch MT2718, MT6989, MT6991, MT8370, MT8390, MT8395, MT8676, MT8678, MT87920 Check my SBOMs

www.cveye.io/en/cve/CVE-2025-20745

Timeline

Published November 4, 2025
Last modified February 26, 2026

References

corp.mediatek.com corp.mediatek.com

Track this CVE