7.5Hoch
CVE-2025-20663
Beschreibung
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-3031.
Schwachstellentyp (CWE):
CWE-248
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| mediatek | mt7915 | — | |
| MediaTek, Inc. | MT7915, MT7916, MT7981, MT7986 | SDK release 7.4.0.1 (MT7915) and 7.6.7.2 (MT7916, MT798X) and before | |
| mediatek | mt7916 | — | |
| mediatek | mt7981 | — | |
| mediatek | mt7986 | — | |
| mediatek | software development kit | ≤ 7.4.0.1 |
Referenzen und Patches
- https://corp.mediatek.com/product-security-bulletin/April-2025 Vendor Advisory
CPE-Treffer (NVD) (6)
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.4.0.1cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.6.7.2cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*