PT-2025-4155 · Mediatek · Mediatek Mt8798 Secmem

Published 2025-02-03 · Updated 2025-02-04 · CVE-2025-20636

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MediaTek MT8798 Secmem (affected versions not specified)

Description In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-381773171

CVE-2025-20636

M-ALPS09403554

Affected Products

Mediatek Mt8798 Secmem

References · 10

• https://corp.mediatek.com/product-security-bulletin/February-2025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20636 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20636 · Vendor Advisory
• https://twitter.com/WolfgangSesin/status/1886303446925513088 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1886300621893967960 · Twitter Post
• https://t.me/cvedetector/17045 · Telegram Post
• https://twitter.com/dailycve/status/1886503547677589784 · Twitter Post
• https://twitter.com/CVEnew/status/1886258620972912941 · Twitter Post
• https://t.me/cvenotify/109734 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1ihj62l/msisac_cybersecurity_advisory_multiple · Reddit Post