CVE-2025-20804: 
NixOS vulnerability analysis and mitigation

CVE-2025-20804 is a use-after-free memory corruption vulnerability in the MediaTek dpe component that can lead to local escalation of privilege on affected Android devices. It was published on January 5, 2026, and affects Android 16.0 running on MediaTek MT6899 and MT6991 chipsets. Exploitation requires that the attacker has already obtained System-level privilege and that user interaction occurs. It carries a CVSS v3.1 base score of 6.7 (Medium) (MediaTek Advisory, Red Hat CVE).

The vulnerability is classified as CWE-416 (Use After Free) and resides in the dpe component of MediaTek's Android firmware for MT6899 and MT6991 chips. A use-after-free condition occurs when freed memory is subsequently accessed, enabling an attacker to corrupt memory in a controlled manner. Exploitation requires local access, System-level privileges already obtained, and user interaction — making it a post-compromise privilege escalation primitive rather than an initial access vector. The patch is identified as ALPS10198951 (Issue ID: MSV-4503) (MediaTek Advisory).

Successful exploitation allows a malicious actor who already holds System privilege to further escalate privileges on the local device, with high impact on confidentiality, integrity, and availability. This could enable unauthorized access to sensitive data, modification of system integrity, or rendering the device unavailable. The scope is limited to the affected device (no network propagation), but the combination of data exposure and system control makes it significant for targeted attacks on devices using MT6899 or MT6991 chips running Android 16.0 (MediaTek Advisory, Red Hat CVE).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The EPSS score is approximately 0.018% (0.000180), reflecting a very low probability of exploitation in the near term. The requirement for pre-existing System privilege and user interaction significantly limits the practical attack surface (MediaTek Advisory).

MediaTek has released a patch (Patch ID: ALPS10198951; Issue ID: MSV-4503) as part of the January 2026 MediaTek Product Security Bulletin. Device owners and OEMs should apply the available security updates immediately. Lenovo has also published a corresponding advisory for affected MediaTek-based tablets (MediaTek Advisory, Lenovo Advisory). As a precautionary measure, restrict System-level privilege access and monitor for suspicious activity on devices using MT6899 or MT6991 chipsets running Android 16.0.