Vulnerability details
CVE-2025-20683
MediaTek MT6890
CVSS 3.1
9.8Critical
Official description
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| MediaTek, Inc. | MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 | SDK release 7.6.7.2 and before / openWRT 19.07, 21.02 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-08
- Last updated
- 2025-07-08
- State
- Published
- Assigner (CNA)
- MediaTek
Exploit prediction (EPSS)
0.57%
Probability of exploitation in 30 days
47.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-787Out-of-bounds Write