4.7Medium
CVE-2025-20740
Description
In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.
Weakness (CWE):
CWE-367
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| MediaTek, Inc. | MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 | NB SDK release 3.7 and before | |
| mediatek | software development kit | ≤ 3.7 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 3.7