Out of Bounds Read Vulnerability in MediaTek WLAN STA Driver
CVE-2025-20693

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mt2737, Mt6835, Mt6878, Mt6886, Mt6897, Mt6899, Mt6985, Mt6989, Mt6990, Mt6991, Mt7902, Mt7920, Mt7921, Mt7922, Mt7923, Mt7925, Mt7927, Mt7932, Mt8196, Mt8678, Mt8796, Mt8893
Vendor
CVE Published:
8 July 2025

What is CVE-2025-20693?

A vulnerability exists in the MediaTek WLAN STA driver that allows for a potential out of bounds read due to an incorrect bounds check. This flaw could enable remote information disclosure without the need for user interaction or additional execution privileges. It is advised to apply the available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT6989, MT6990, MT6991, MT7902, MT7920, MT7921, MT7922, MT7923, MT7925, MT7927, MT7932, MT8196, MT8678, MT8796, MT8893 Android 13.0, 14.0, 15.0 / SDK release 3.7 and before / openWRT 21.02, 23.05 / Yocto 4.0

References

https://corp.mediatek.com/product-security-bulletin/July-...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20693 : Out of Bounds Read Vulnerability in MediaTek WLAN STA Driver