CVE-2025-20676

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*

History

10 Jul 2025, 17:32

Type Values Removed Values Added
First Time Mediatek mt7921
Mediatek mt7925
Mediatek mt7902
Mediatek nbiot Sdk
Mediatek mt7927
Mediatek mt7922
Mediatek
CPE cpe:2.3:h:mediatek:mt7902:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7921:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7922:-:*:*:*:*:*:*:*
References () https://corp.mediatek.com/product-security-bulletin/June-2025 - () https://corp.mediatek.com/product-security-bulletin/June-2025 - Vendor Advisory

03 Jun 2025, 18:15

Type Values Removed Values Added
CWE CWE-476

02 Jun 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-02 03:15

Updated : 2025-07-10 17:32


NVD link : CVE-2025-20676

Mitre link : CVE-2025-20676


JSON object : View

Products Affected

mediatek

  • mt7927
  • mt7921
  • mt7925
  • mt7922
  • nbiot_sdk
  • mt7902
CWE

No CWE.