CVE-2025-20688

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-20688

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

n wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480.

References
Link Resource
https://corp.mediatek.com/product-security-bulletin/July-2025 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*
History

09 Jul 2025, 17:23

Type Values Removed Values Added
CPE cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*
cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*
References () https://corp.mediatek.com/product-security-bulletin/July-2025 - () https://corp.mediatek.com/product-security-bulletin/July-2025 - Vendor Advisory
First Time Mediatek
Mediatek mt7915
Openwrt openwrt
Openwrt
Mediatek mt7615
Mediatek mt7916
Mediatek mt6890
Mediatek mt7663
Mediatek mt7622
Mediatek mt7981
Mediatek software Development Kit
Mediatek mt7986

08 Jul 2025, 15:15

Type Values Removed Values Added
Summary
  • (es) En el controlador del punto de acceso WLAN, existe una posible lectura fuera de los límites debido a una comprobación incorrecta de los límites. Esto podría provocar la divulgación de información local, lo que requiere privilegios de ejecución del usuario. No se requiere la interacción del usuario para su explotación. ID de parche: WCNCR00418047; ID de problema: MSV-3480.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

08 Jul 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-08 03:15

Updated : 2025-07-09 17:23

NVD link : CVE-2025-20688

Mitre link : CVE-2025-20688

CVE.ORG link : CVE-2025-20688

JSON object : View

Products Affected

mediatek

openwrt

CWE
CWE-125

Out-of-bounds Read