CVE-2025-20665

MEDIUM

Published May 5, 2025 Modified May 12, 2025 CWE-538

Description

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760.

Is your site exposed to CVE-2025-20665?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness Type (CWE)

CWE-538 CWE-538

Affected Products

Vendor	Product	Versions
google	android	All
google	android	All
google	android	All
mediatek	mt6580	All
mediatek	mt6761	All
mediatek	mt6765	All
mediatek	mt6768	All
mediatek	mt6779	All
mediatek	mt6781	All
mediatek	mt6785	All
mediatek	mt6789	All
mediatek	mt6833	All
mediatek	mt6835	All
mediatek	mt6853	All
mediatek	mt6855	All
mediatek	mt6873	All
mediatek	mt6877	All
mediatek	mt6879	All
mediatek	mt6883	All
mediatek	mt6885	All
mediatek	mt6886	All
mediatek	mt6889	All
mediatek	mt6893	All
mediatek	mt6895	All
mediatek	mt6983	All
mediatek	mt6985	All
mediatek	mt8175	All
mediatek	mt8195	All
mediatek	mt8196	All
mediatek	mt8321	All
mediatek	mt8365	All
mediatek	mt8370	All
mediatek	mt8385	All
mediatek	mt8390	All
mediatek	mt8395	All
mediatek	mt8666	All
mediatek	mt8667	All
mediatek	mt8673	All
mediatek	mt8678	All
mediatek	mt8765	All
mediatek	mt8766	All
mediatek	mt8768	All
mediatek	mt8771	All
mediatek	mt8775	All
mediatek	mt8781	All
mediatek	mt8786	All
mediatek	mt8788	All
mediatek	mt8788e	All
mediatek	mt8789	All
mediatek	mt8791t	All
mediatek	mt8795t	All
mediatek	mt8796	All
mediatek	mt8797	All
mediatek	mt8798	All
mediatek	mt8893	All

References

Advisories & Patches

https://corp.mediatek.com/product-security-bulletin/May-2025

Frequently Asked Questions

What is CVE-2025-20665? +

How severe is CVE-2025-20665? +

CVE-2025-20665 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2025-20665? +

CVE-2025-20665 affects products from google, mediatek, specifically: android, mt6580, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6983, mt6985, mt8175, mt8195, mt8196, mt8321, mt8365, mt8370, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8678, mt8765, mt8766, mt8768, mt8771, mt8775, mt8781, mt8786, mt8788, mt8788e, mt8789, mt8791t, mt8795t, mt8796, mt8797, mt8798, mt8893. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-20665? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2016-15056

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after …

CVE-2021-4471

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in …

CVE-2024-6880

During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret …

CVE-2026-46617

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version …

CVE-2026-29114

A vulnerability has been found in some Dahua products. An attacker may obtain the device’s CA root certificate. If that …

CVE-2023-7062 8.8

The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, …