4.6 Moyenne

CVE-2025-20638 In DA, there is a possible read of uninitialized heap data due to uninitialized data

Description

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291449; Issue ID: MSV-2066.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT...	Versions non publiées

Les 8 CVE de MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT... →

CVE-2025-20643 In DA, there is a possible out of bounds read due to a missing bounds check 5.7 Moyenne CVE-2025-20642 In DA, there is a possible out of bounds write due to a missing bounds check 6.2 Moyenne CVE-2025-20641 In DA, there is a possible out of bounds write due to a missing bounds check 7.3 Élevée CVE-2025-20640 In DA, there is a possible out of bounds read due to a missing bounds check 6.2 Moyenne

Vous utilisez MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT... ?

Suivre cette CVE Surveiller MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT... Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2025-20638

Chronologie

Publiée 3 février 2025
Dernière modification 3 février 2025

Références

corp.mediatek.com corp.mediatek.com

Suivre cette CVE

CVE-2025-20638 In DA, there is a possible read of uninitialized heap data due to uninitialized data

Description

Produits et versions touchés

Autres CVE de MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT...