CVE-2025-20671

In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09698599; Issue ID: MSV-3228...

CVE-2025-20671

CVE-2025-20671 concerns MediaTek chipsets. The issue is an out-of-bounds write caused by a race condition in the thermal subsystem, enabling local escalation of privilege for an attacker already with System privileges. Exploitation reportedly does not require user interaction. A patch is listed (...