CVE-2025-20641
Published: 03 February 2025
Summary
CVE-2025-20641 is a medium-severity Out-of-bounds Write (CWE-787) vulnerability in Google Android. Its CVSS base score is 6.6 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 8.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 PE-3 (Physical Access Control) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2025-20641 is an out-of-bounds write vulnerability in DA due to a missing bounds check. It affects MediaTek products, as documented in their product security bulletin.
An attacker with physical access to the device can exploit this vulnerability to achieve local escalation of privilege. No additional execution privileges are required, though user interaction is needed for exploitation. The vulnerability has a CVSS v3.1 base score of 6.6 (AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and is associated with CWE-787.
MediaTek has issued patch ALPS09291146 to address this issue (MSV-2058). For mitigation details, affected versions, and patching instructions, refer to the February 2025 product security bulletin at https://corp.mediatek.com/product-security-bulletin/February-2025.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-2191
Vulnerability details
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User…
more
interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2058.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Out-of-bounds write in DA enables local privilege escalation via exploitation (T1068) with physical access.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses the missing bounds check causing the out-of-bounds write by requiring validation of all information inputs.
Implements memory protection mechanisms such as address space layout randomization and non-executable memory to mitigate out-of-bounds write exploits.
Prevents physical access to the device, which is required by the attacker to exploit this vulnerability.