7.5High
CVE-2025-20664
Description
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.
Weakness (CWE):
CWE-248
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| mediatek | mt7915 | — | |
| MediaTek, Inc. | MT7915, MT7916, MT7981, MT7986, MT7990, MT7992 | SDK release 7.4.0.1 (MT7915) and 7.6.7.2 (MT7916, MT798X) and 8.2.1.4 (MT799X) and before | |
| mediatek | mt7916 | — | |
| mediatek | mt7981 | — | |
| mediatek | mt7986 | — | |
| mediatek | mt7990 | — | |
| mediatek | mt7992 | — | |
| mediatek | software development kit | ≤ 7.4.0.1 |
References and patches
- https://corp.mediatek.com/product-security-bulletin/April-2025 Vendor Advisory
CPE matches (NVD) (9)
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.4.0.1cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.6.7.2cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 8.2.1.4cpe:2.3:h:mediatek:mt7990:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7992:-:*:*:*:*:*:*:*