Out of Bounds Read Vulnerability in MediaTek WLAN STA Driver
CVE-2025-20693

6.5MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt2737, Mt6835, Mt6878, Mt6886, Mt6897, Mt6899, Mt6985, Mt6989, Mt6990, Mt6991, Mt7902, Mt7920, Mt7921, Mt7922, Mt7923, Mt7925, Mt7927, Mt7932, Mt8196, Mt8678, Mt8796, Mt8893
Vendor
CVE Published:
8 July 2025

What is CVE-2025-20693?

A vulnerability exists in the MediaTek WLAN STA driver that allows for a potential out of bounds read due to an incorrect bounds check. This flaw could enable remote information disclosure without the need for user interaction or additional execution privileges. It is advised to apply the available patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT6989, MT6990, MT6991, MT7902, MT7920, MT7921, MT7922, MT7923, MT7925, MT7927, MT7932, MT8196, MT8678, MT8796, MT8893 Android 13.0, 14.0, 15.0 / SDK release 3.7 and before / openWRT 21.02, 23.05 / Yocto 4.0

References

https://corp.mediatek.com/product-security-bulletin/July-...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.