Remote Denial of Service Vulnerability in MediaTek Bluetooth Firmware
CVE-2025-20694

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mt2718, Mt6639, Mt6653, Mt6985, Mt6989, Mt6990, Mt6991, Mt7925, Mt7927, Mt8113, Mt8115, Mt8127, Mt8163, Mt8168, Mt8169, Mt8173, Mt8183, Mt8186, Mt8188, Mt8195, Mt8196, Mt8370, Mt8390, Mt8391, Mt8395, Mt8512, Mt8516, Mt8519, Mt8676, Mt8678, Mt8695, Mt8696, Mt8698, Mt8786, Mt8792, Mt8796, Mt8893
Vendor
CVE Published:
8 July 2025

What is CVE-2025-20694?

A vulnerability exists in the Bluetooth firmware from MediaTek, where an uncaught exception can cause a system crash. This issue allows attackers to trigger a denial of service remotely, without requiring user interaction or additional execution privileges. Devices utilizing affected MediaTek Bluetooth firmware could experience interruptions, significantly impacting their availability and functionality. Users should apply the necessary patches to mitigate this risk.

Affected Version(s)

MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113, MT8115, MT8127, MT8163, MT8168, MT8169, MT8173, MT8183, MT8186, MT8188, MT8195, MT8196, MT8370, MT8390, MT8391, MT8395, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8786, MT8792, MT8796, MT8893 Android 13.0, 14.0, 15.0 / SDK release 3.7 and before / openWRT 21.02, 23.05

References

https://corp.mediatek.com/product-security-bulletin/July-...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20694 : Remote Denial of Service Vulnerability in MediaTek Bluetooth Firmware