ByteOS Network

CVE Vulnerability Details :

CVE-2025-20692

PUBLISHED

More Info Official Page

Assigner-MediaTek

Assigner Org ID-ee979b05-11f8-4f25-a7e0-a1fa9c190374

Published At-08 Jul, 2025 | 02:00

Updated At-08 Jul, 2025 | 14:16

▼CVE Numbering Authority (CNA)

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.

Affected Products

Vendor

MediaTek Inc.

Product

MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986

Versions

Affected

SDK release 7.6.7.2 and before / openWRT 19.07, 21.02

Problem Types

Type	CWE ID	Description
CWE	CWE-125	CWE-125 Out-of-bounds Read

Type: CWE

CWE ID: CWE-125

Description: CWE-125 Out-of-bounds Read

References

Hyperlink	Resource
https://corp.mediatek.com/product-security-bulletin/July-2025	N/A

Hyperlink: https://corp.mediatek.com/product-security-bulletin/July-2025

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References