CVE-2025-20664

Published: Apr 7, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.

Affected (9)

Products: Mediatek: Software Development Kit, Mt7915, Mt7916, Mt7981, Mt7986, Mt7990, Mt7992

7 products

Software Development Kit

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mediatek Software Development Kit	Up to 7.4.0.1
Mediatek Mt7915	All versions

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Mediatek Software Development Kit	Up to 7.6.7.2
Mediatek Mt7916	All versions
Mediatek Mt7981	All versions
Mediatek Mt7986	All versions

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Mediatek Software Development Kit	Up to 8.2.1.4
Mediatek Mt7990	All versions
Mediatek Mt7992	All versions

Related CWEs

Uncaught Exception

An exception is thrown from a function, but it is not caught.

References (1)

https://corp.mediatek.com/product-security-bulletin/April-2025

Source: security@mediatek.com

Vendor Advisory

Timeline

No history available yet.