CVE-2025-20745: Use After Free
Published Nov 4, 2025
·Updated
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10095441; Issue ID: MSV-4294.
Affected Software
12 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Google Android=15.0
Any of the following
MediaTek Mt2718
MediaTek Mt6989
MediaTek Mt6991
MediaTek Mt8370
MediaTek Mt8390
MediaTek Mt8395
MediaTek Mt8676
MediaTek Mt8678
MediaTek Mt87920
Event History
Nov 4, 2025
CVE Published
via MITRE·06:20 AM
Data Sourced
via MITRE·06:20 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20745?
CVE-2025-20745 is a high-severity vulnerability due to potential memory corruption that allows local privilege escalation.
2
How do I fix CVE-2025-20745?
To fix CVE-2025-20745, apply the security patch identified as ALPS10095441 provided by the vendor.
3
What is the impact of CVE-2025-20745 on my system?
CVE-2025-20745 can lead to local escalation of privilege if exploited by an attacker with existing System privileges.
4
Does CVE-2025-20745 require user interaction for exploitation?
No, CVE-2025-20745 does not require user interaction for exploitation.
5
What versions of Android are affected by CVE-2025-20745?
CVE-2025-20745 affects Android versions 13.0, 14.0, and 15.0.