Remote Denial of Service Vulnerability in MediaTek Bluetooth Firmware
CVE-2025-20694

6.5MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt2718, Mt6639, Mt6653, Mt6985, Mt6989, Mt6990, Mt6991, Mt7925, Mt7927, Mt8113, Mt8115, Mt8127, Mt8163, Mt8168, Mt8169, Mt8173, Mt8183, Mt8186, Mt8188, Mt8195, Mt8196, Mt8370, Mt8390, Mt8391, Mt8395, Mt8512, Mt8516, Mt8519, Mt8676, Mt8678, Mt8695, Mt8696, Mt8698, Mt8786, Mt8792, Mt8796, Mt8893
Vendor
CVE Published:
8 July 2025

What is CVE-2025-20694?

A vulnerability exists in the Bluetooth firmware from MediaTek, where an uncaught exception can cause a system crash. This issue allows attackers to trigger a denial of service remotely, without requiring user interaction or additional execution privileges. Devices utilizing affected MediaTek Bluetooth firmware could experience interruptions, significantly impacting their availability and functionality. Users should apply the necessary patches to mitigate this risk.

Affected Version(s)

MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113, MT8115, MT8127, MT8163, MT8168, MT8169, MT8173, MT8183, MT8186, MT8188, MT8195, MT8196, MT8370, MT8390, MT8391, MT8395, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8786, MT8792, MT8796, MT8893 Android 13.0, 14.0, 15.0 / SDK release 3.7 and before / openWRT 21.02, 23.05

References

https://corp.mediatek.com/product-security-bulletin/July-...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.