CVE-2025-20744

In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10127160; Issue ID: MSV-4542.

• CWE-416

• https://corp.mediatek.com/product-security-bulletin/November-2025Vendor Advisory

Published

Nov 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20739In wlan AP driver, there is a possible out of bounds write d…6.7
• CVE-2025-2074The Advanced Google reCAPTCHA plugin for WordPress is vulner…5.3
• CVE-2025-20740In wlan STA driver, there is a possible out of bounds read d…4.7
• CVE-2025-20741In wlan AP driver, there is a possible out of bounds write d…6.7
• CVE-2025-20742In wlan AP driver, there is a possible out of bounds write d…8
• CVE-2025-20743In clkdbg, there is a possible escalation of privilege due t…4.2
• CVE-2025-20745In apusys, there is a possible memory corruption due to use …4.2
• CVE-2025-20746In gnss service, there is a possible out of bounds write due…6.7
• CVE-2025-20747In gnss service, there is a possible out of bounds write due…6.7
• CVE-2025-20748In wlan AP driver, there is a possible out of bounds write d…6.7
• CVE-2025-20749In charger, there is a possible out of bounds write due to a…6.7
• CVE-2025-2075The Uncanny Automator – Easy Automation, Integration, Webhoo…8.8