← Back

CVE-2025-20631

nvd nist
Published: Feb 3, 2025Modified: Apr 22, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187.

Affected (1)

Mediatek
1 product
Software Development Kit
Configuration A
1 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Software Development Kit
Up to 7.6.7.2
Running on/withPlatform Versions
Mediatek
Mt7615
All versions
Mediatek
Mt7622
All versions
Mediatek
Mt7663
All versions
Mediatek
Mt7915
All versions
Mediatek
Mt7916
All versions
Mediatek
Mt7981
All versions
Mediatek
Mt7986
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.