CVE-2025-20722

🗓️ 14 Oct 2025 09:11:48Reported by MediaTekType

Gnss driver has an out of bounds read due to integer overflow, risking local information disclosure with System privileges; no user interaction.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-20722	14 Oct 202513:44	–	circl
CNNVD	MediaTek Chipsets 安全漏洞	14 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-20722	14 Oct 202509:11	–	cvelist
EUVD	EUVD-2025-34168	14 Oct 202512:31	–	euvd
NVD	CVE-2025-20722	14 Oct 202510:15	–	nvd
Positive Technologies	PT-2025-41878	14 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20722	15 Oct 202509:54	–	redhatcve
Vulnrichment	CVE-2025-20722	14 Oct 202509:11	–	vulnrichment

NVD

Vulners

Node

rdkcentral rdk-bMatch2024q1

google androidMatch14.0

google androidMatch15.0

openwrt openwrtMatch21.02.0-

openwrt openwrtMatch23.05

AND

mediatek mt6835Match-

mediatek mt6878Match-

mediatek mt6886Match-

mediatek mt6897Match-

mediatek mt6899Match-

mediatek mt6980dMatch-

mediatek mt6985Match-

mediatek mt6989Match-

mediatek mt6990Match-

mediatek mt6991Match-

mediatek mt8676Match-

mediatek mt8678Match-

mediatek mt8775Match-

mediatek mt8791tMatch-

mediatek mt8796Match-

mediatek mt8873Match-

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6835, MT6878, MT6886, MT6897, MT6899, MT6980D, MT6985, MT6989, MT6990, MT6991, MT8676, MT8678, MT8775, MT8791T, MT8796, MT8873",
    "versions": [
      {
        "version": "Android 14.0, 15.0 / openWRT 21.02, 23.05 / RDKB 24Q1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/October-2025

15 Oct 2025 18:45Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.5

EPSS0.00006

SSVC

CWE-190