CVE-2025-20655

The Keymaster component of MediaTek’s microprogramming software is vulnerable to an out-of-bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this flaw to cause local information disclosure and potentially enhance their privileges or expos...

CVE-2025-20661

A security vulnerability exists in the PlayReady TA component, which is part of MediaTek's microprogramming software used in their chipsets. The root cause is a missing bounds check , leading to a possible out-of-bounds read in memory. If a malicious actor has already obtained System privilege , ...

CVE-2025-20662

The PlayReady TA component of MediaTek microprogramming software contains an out-of-bounds read vulnerability caused by a missing bounds check . An attacker who has already obtained System privilege could exploit this flaw to achieve local escalation of privilege . This vulnerability requires no ...