Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20648

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.

Published

2025-03-03T03:15:09.620

Last Modified

2025-04-22T13:46:59.780

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-125
  • Type: Primary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System google android 13.0 Yes
Operating System google android 14.0 Yes
Operating System google android 15.0 Yes
Hardware mediatek mt2718 - No
Hardware mediatek mt6879 - No
Hardware mediatek mt6989 - No
Hardware mediatek mt8196 - No
Hardware mediatek mt8370 - No
Hardware mediatek mt8390 - No
Hardware mediatek mt8395 - No
Hardware mediatek mt8673 - No
Hardware mediatek mt8678 - No
References