Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-20665 EUVD-2025-13336GHSA-52hf-pcf2-jrqx

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of …

Published May 5, 2025 · Updated May 12, 2025 · Assigned by MediaTek

Description

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760.

Affected products

VendorProductAffectedFixed
MediaTek MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8175 Android 13.0, 14.0, 15.0 —

References