7.5Yüksek
CVE-2025-20664
Açıklama
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.
Zayıflık türü (CWE):
CWE-248
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| mediatek | mt7915 | — | |
| MediaTek, Inc. | MT7915, MT7916, MT7981, MT7986, MT7990, MT7992 | SDK release 7.4.0.1 (MT7915) and 7.6.7.2 (MT7916, MT798X) and 8.2.1.4 (MT799X) and before | |
| mediatek | mt7916 | — | |
| mediatek | mt7981 | — | |
| mediatek | mt7986 | — | |
| mediatek | mt7990 | — | |
| mediatek | mt7992 | — | |
| mediatek | software development kit | ≤ 7.4.0.1 |
Kaynaklar ve yamalar
- https://corp.mediatek.com/product-security-bulletin/April-2025 Vendor Advisory
CPE eşleşmeleri (NVD) (9)
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.4.0.1cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 7.6.7.2cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*≤ 8.2.1.4cpe:2.3:h:mediatek:mt7990:-:*:*:*:*:*:*:*cpe:2.3:h:mediatek:mt7992:-:*:*:*:*:*:*:*