Approved changes feed: RSS · Atom

cpe:2.3:a:mediatek,_inc.:mt6739,_mt6761,_mt6765,_mt6768,_mt6771,_mt6779,_mt6781,_mt6785,_mt6833,_mt6853,_mt6873,_mt6877,_mt6885,_mt6893,_mt8167,_mt8167s,_mt8175,_mt8185,_mt8195,_mt8321,_mt8362a,_mt8365,_mt8385,_mt8395,_mt8666,_mt8667,_mt8673,_mt8675,_mt8678,_mt8765,_mt8766,_mt8768,_mt8771,_mt8775,_mt8781,_mt8786,_mt8788,_mt8789,_mt8791t,_mt8795t,_mt8797,_mt8798,_mt8893:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMediatek, Inc. (eee3d5c0-1182-5259-b2ae-e0f6093b417a)
ProductMt6739, Mt6761, Mt6765, Mt6768, Mt6771, Mt6779, Mt6781, Mt6785, Mt6833, Mt6853, Mt6873, Mt6877, Mt6885, Mt6893, Mt8167, Mt8167S, Mt8175, Mt8185, Mt8195, Mt8321, Mt8362A, Mt8365, Mt8385, Mt8395, Mt8666, Mt8667, Mt8673, Mt8675, Mt8678, Mt8765, Mt8766, Mt8768, Mt8771, Mt8775, Mt8781, Mt8786, Mt8788, Mt8789, Mt8791T, Mt8795T, Mt8797, Mt8798, Mt8893 (b382be55-4e97-521b-ae24-56e97c2a4c35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-20643 vulnerable 2026-06-08 07:08:48.692094 Details available
In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2056.
Published: 2025-02-03T03:24:08.097Z
Updated: 2025-02-03T17:15:03.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20642 vulnerable 2026-06-08 07:08:48.689845 Details available
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2057.
Published: 2025-02-03T03:24:06.483Z
Updated: 2025-02-03T17:17:21.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20641 vulnerable 2026-06-08 07:08:48.687131 Details available
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2058.
Published: 2025-02-03T03:24:04.876Z
Updated: 2025-02-03T17:20:37.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20640 vulnerable 2026-06-08 07:08:48.684851 Details available
In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2059.
Published: 2025-02-03T03:24:03.332Z
Updated: 2025-02-03T17:21:58.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20639 vulnerable 2026-06-08 07:08:48.682517 Details available
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2060.
Published: 2025-02-03T03:24:01.156Z
Updated: 2025-02-03T17:23:00.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20638 vulnerable 2026-06-08 07:08:48.662158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20142 vulnerable 2026-06-08 06:27:17.279027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20141 vulnerable 2026-06-08 06:27:17.274952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.