CVE-2025-20648 | MediaTek MT8678 Apu out-of-bounds (MSV-2584 / ALPS09456673)

A vulnerability has been found in MediaTek MT2718, MT6879, MT6989, MT8196, MT8370, MT8390, MT8395, MT8673 and MT8678 and classified as problematic. This vulnerability affects unknown code of the component Apu. The manipulation leads to out-of-bounds read.

This vulnerability was named CVE-2025-20648. Attacking locally is a requirement. There is no exploit available.

It is recommended to apply a patch to fix this issue.