5.5Mittel
CVE-2025-20724
Beschreibung
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475.
Schwachstellentyp (CWE):
CWE-125
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| MediaTek, Inc. | MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 | SDK release 7.6.7.2 and before / openWRT 19.07, 21.02 (MT6890) | |
| mediatek | software development kit | ≤ 7.6.7.2 | |
| openwrt | openwrt | 19.07.0 |
Referenzen und Patches
- https://corp.mediatek.com/product-security-bulletin/October-2025 Vendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.6.7.2cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*