CVE-2025-20707: Use After Free
Published Sep 1, 2025
·Updated
In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09924201; Issue ID: MSV-3820.
Affected Software
20 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Google Android=15.0
Any of the following
MediaTek Mt2718
MediaTek Mt6853
MediaTek Mt6877
MediaTek Mt6893
MediaTek Mt6899
MediaTek Mt6991
MediaTek Mt8196
MediaTek Mt8676
MediaTek Mt8678
MediaTek Mt8775
MediaTek Mt8786
MediaTek Mt8788e
MediaTek Mt8791t
MediaTek Mt8792
MediaTek Mt8796
MediaTek Mt8883
MediaTek Mt8893
Event History
Sep 1, 2025
CVE Published
via MITRE·05:12 AM
Data Sourced
via MITRE·05:12 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20707?
CVE-2025-20707 has a high severity level due to the potential for local escalation of privilege.
2
How do I fix CVE-2025-20707?
To fix CVE-2025-20707, apply the patch identified as ALPS09924201.
3
Which systems are affected by CVE-2025-20707?
CVE-2025-20707 affects Google Android versions 13.0, 14.0, and 15.0.
4
Can CVE-2025-20707 be exploited without user interaction?
Yes, CVE-2025-20707 can be exploited without requiring user interaction.
5
What type of vulnerability is CVE-2025-20707?
CVE-2025-20707 is a memory corruption vulnerability caused by use after free.