CVE-2025-20637
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.
Affected (1)
Products: Mediatek: Software Development Kit
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.6.7.0 |
| Running on/with | Platform Versions |
|---|---|
Mediatek Mt7981 | All versions |
Mediatek Mt7986 | All versions |
Related CWEs
CWE-248
Uncaught Exception
An exception is thrown from a function, but it is not caught.
CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
References (1)
Source: security@mediatek.com
Vendor Advisory
Timeline
No history available yet.