EUVD-2025-5831

Malicious code in bioql PyPI...

CVE-2025-20645

The CVE-2025-20645 issue affects MediaTek components (KeyInstall) and is caused by a missing bounds check, leading to a possible out-of-bounds write. This could enable local privilege escalation for an attacker with System privileges, with no user interaction required. A patch is available (ALPS0...

CVE-2025-20645

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599...