CVE-2025-20799: Use After Free

Published Jan 6, 2026

Updated

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049.

Affected Software

6 affected components

All of the following

Any of the following

Google Android=15.0

Google Android=16.0

Any of the following

MediaTek Mt6899

MediaTek Mt6991

MediaTek Mt6993

MediaTek Mt8793

Event History

Jan 6, 2026

CVE Published

via MITRE·01:46 AM

Data Sourced

via MITRE·01:46 AM

DescriptionWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-20799?

CVE-2025-20799 has a high severity due to the potential for local privilege escalation through memory corruption.

How do I fix CVE-2025-20799?

To mitigate CVE-2025-20799, apply the patch identified by ALPS10274607 immediately.

What software is affected by CVE-2025-20799?

CVE-2025-20799 affects Google Android versions 15.0 and 16.0.

Can CVE-2025-20799 be exploited without user interaction?

Yes, CVE-2025-20799 can be exploited without any user interaction once the attacker has system privileges.

What could happen if CVE-2025-20799 is exploited?

If successfully exploited, CVE-2025-20799 could allow a malicious actor to escalate privileges on the affected system.