Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

mt7990

Source -

NVDADP

CNA CVEs -

0

ADP CVEs -

1

CISA CVEs -

0

NVD CVEs -

4
Related CVEsRelated VendorsRelated AssignersReports
4Vulnerabilities found
CVE-2026-20452
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.43% / 35.79%
||
7 Day CHG~0.00%
Published-01 Jun, 2026 | 03:20
Updated-22 Jul, 2026 | 07:10
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt7915mt7916_firmwaremt7990_firmwaremt7992mt6890_firmwaremt7990mt7615mt7993_firmwaremt7615_firmwaremt7986_firmwaremt7915_firmwaremt7993mt7981_firmwaremt7916mt7992_firmwaremt6890mt7981mt7986MediaTek chipset
CWE ID-CWE-122
Heap-based Buffer Overflow
CVE-2025-20674
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-9.8||CRITICAL
EPSS-0.65% / 47.68%
||
7 Day CHG~0.00%
Published-02 Jun, 2025 | 02:29
Updated-26 Feb, 2026 | 18:27
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303.

Action-Not Available
Vendor-MediaTek Inc.OpenWrt
Product-mt7993mt7981mt7990mt7986mt7992mt7916openwrtmt6890mt6990software_development_kitmt7915MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993
CWE ID-CWE-863
Incorrect Authorization
CVE-2025-20664
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.5||HIGH
EPSS-0.52% / 41.44%
||
7 Day CHG~0.00%
Published-07 Apr, 2025 | 03:15
Updated-11 Apr, 2025 | 15:52
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt7916mt7986mt7915mt7990software_development_kitmt7981mt7992MT7915, MT7916, MT7981, MT7986, MT7990, MT7992
CWE ID-CWE-248
Uncaught Exception
CVE-2023-20820
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-7.2||HIGH
EPSS-1.19% / 64.92%
||
7 Day CHG~0.00%
Published-04 Sep, 2023 | 02:27
Updated-09 Oct, 2024 | 15:32
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.

Action-Not Available
Vendor-MediaTek Inc.OpenWrt
Product-mt7981mt7615mt6890mt7603openwrtmt7986mt7612mt7916mt7629mt7990mt7622mt7626mt7915mt7613MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990mt7981mt7615mt6890mt7603mt7986mt7612mt7916mt7629mt7990mt7622mt7626mt7915mt7613