← Back

CVE-2025-20672

nvd nist
Published: Jun 2, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292.

Affected (5)

Mediatek
5 products
Mt7902 Firmware
Mt7921 Firmware
Mt7922 Firmware
Mt7925 Firmware
Mt7927 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt7902 Firmware
Up to 3.6
Running on/withPlatform Versions
Mediatek
Mt7902
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt7921 Firmware
Up to 3.6
Running on/withPlatform Versions
Mediatek
Mt7921
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt7922 Firmware
Up to 3.6
Running on/withPlatform Versions
Mediatek
Mt7922
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt7925 Firmware
Up to 3.6
Running on/withPlatform Versions
Mediatek
Mt7925
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt7927 Firmware
Up to 3.6
Running on/withPlatform Versions
Mediatek
Mt7927
All versions

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.