PT-2026-1388 · Mediatek · Dpe

Published 2026-01-06 · Updated 2026-01-06 · CVE-2025-20803

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dpe (affected versions not specified)

Description A memory corruption issue exists in dpe due to an integer overflow. Successful exploitation could allow a malicious actor to gain local system privileges, but requires the attacker to already have System privileges and user interaction is needed.

Recommendations Apply patch ALPS10199779.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-20803

Affected Products

Dpe

References · 4

• https://osv.dev/vulnerability/CVE-2025-20803 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20803 · Security Note
• https://corp.mediatek.com/product-security-bulletin/January-2026 · Vendor Advisory
• https://twitter.com/CVEnew/status/2008391006832783436 · Twitter Post