{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T18:54:37.522","vulnerabilities":[{"cve":{"id":"CVE-2025-20655","sourceIdentifier":"security@mediatek.com","published":"2025-04-07T04:15:19.327","lastModified":"2026-06-17T08:41:45.790","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183."},{"lang":"es","value":"En Keymaster, existe una posible lectura fuera de los límites debido a la falta de una comprobación de los límites. Esto podría provocar la divulgación de información local si un actor malicioso ya ha obtenido el privilegio de System. No se requiere la interacción del usuario para la explotación. ID de parche: DTV04427687; ID de problema: MSV-3183."}],"affected":[{"source":"security@mediatek.com","affectedData":[{"vendor":"MediaTek, Inc.","product":"MT9972","versions":[{"version":"Android 12.0, 14.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-07T14:21:06.053412Z","id":"CVE-2025-20655","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@mediatek.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*","matchCriteriaId":"16820CAF-0A8A-45C8-B5A8-979EA0407389"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*","matchCriteriaId":"2700BCC5-634D-4EC6-AB67-5B678D5F951D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:mediatek:mt9972:-:*:*:*:*:*:*:*","matchCriteriaId":"0C76B993-B660-41EB-A66A-96011A044BF6"}]}]}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/April-2025","source":"security@mediatek.com","tags":["Vendor Advisory"]}]}}]}