CVE-2025-20694

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

n Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/July-2025	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:mediatek:software_development_kit::::::::
	cpe:2.3:o:google:android:13.0:::::::*
	cpe:2.3:o:google:android:14.0:::::::*
	cpe:2.3:o:google:android:15.0:::::::*
	cpe:2.3:o:openwrt:openwrt:21.02.0:-::::::
	cpe:2.3:o:openwrt:openwrt:23.05:::::::*

OR	cpe:2.3:h:mediatek:mt2718:-:::::::*
	cpe:2.3:h:mediatek:mt6639:-:::::::*
	cpe:2.3:h:mediatek:mt6653:-:::::::*
	cpe:2.3:h:mediatek:mt6985:-:::::::*
	cpe:2.3:h:mediatek:mt6989:-:::::::*
	cpe:2.3:h:mediatek:mt6990:-:::::::*
	cpe:2.3:h:mediatek:mt6991:-:::::::*
	cpe:2.3:h:mediatek:mt7925:-:::::::*
	cpe:2.3:h:mediatek:mt7927:-:::::::*
	cpe:2.3:h:mediatek:mt8113:-:::::::*
	cpe:2.3:h:mediatek:mt8115:-:::::::*
	cpe:2.3:h:mediatek:mt8127:-:::::::*
	cpe:2.3:h:mediatek:mt8163:-:::::::*
	cpe:2.3:h:mediatek:mt8168:-:::::::*
	cpe:2.3:h:mediatek:mt8169:-:::::::*
	cpe:2.3:h:mediatek:mt8173:-:::::::*
	cpe:2.3:h:mediatek:mt8183:-:::::::*
	cpe:2.3:h:mediatek:mt8186:-:::::::*
	cpe:2.3:h:mediatek:mt8188:-:::::::*
	cpe:2.3:h:mediatek:mt8195:-:::::::*
	cpe:2.3:h:mediatek:mt8196:-:::::::*
	cpe:2.3:h:mediatek:mt8370:-:::::::*
	cpe:2.3:h:mediatek:mt8390:-:::::::*
	cpe:2.3:h:mediatek:mt8391:-:::::::*
	cpe:2.3:h:mediatek:mt8395:-:::::::*
	cpe:2.3:h:mediatek:mt8512:-:::::::*
	cpe:2.3:h:mediatek:mt8516:-:::::::*
	cpe:2.3:h:mediatek:mt8519:-:::::::*
	cpe:2.3:h:mediatek:mt8676:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*
	cpe:2.3:h:mediatek:mt8695:-:::::::*
	cpe:2.3:h:mediatek:mt8696:-:::::::*
	cpe:2.3:h:mediatek:mt8698:-:::::::*
	cpe:2.3:h:mediatek:mt8786:-:::::::*
	cpe:2.3:h:mediatek:mt8792:-:::::::*
	cpe:2.3:h:mediatek:mt8796:-:::::::*
	cpe:2.3:h:mediatek:mt8893:-:::::::*

History

14 Jul 2025, 17:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.5~~	v2 : unknown v3 : 6.5

09 Jul 2025, 17:22

Type	Values Removed	Values Added
References	~~() https://corp.mediatek.com/product-security-bulletin/July-2025 -~~	() https://corp.mediatek.com/product-security-bulletin/July-2025 - Vendor Advisory
First Time		Mediatek Mediatek mt8678 Mediatek mt8390 Mediatek mt8173 Mediatek mt8169 Mediatek mt7927 Mediatek mt8893 Mediatek mt8391 Mediatek mt8676 Mediatek mt6989 Mediatek mt8115 Mediatek mt7925 Mediatek mt8196 Mediatek mt8786 Mediatek software Development Kit Mediatek mt2718 Mediatek mt8113 Mediatek mt8516 Mediatek mt8512 Mediatek mt8796 Google Mediatek mt6985 Mediatek mt8186 Mediatek mt6653 Mediatek mt8127 Mediatek mt8696 Mediatek mt8188 Mediatek mt6639 Mediatek mt8168 Google android Mediatek mt8395 Mediatek mt6990 Openwrt openwrt Mediatek mt8519 Mediatek mt8163 Mediatek mt8698 Mediatek mt8183 Openwrt Mediatek mt8195 Mediatek mt8695 Mediatek mt8370 Mediatek mt6991 Mediatek mt8792
CPE		cpe:2.3:h:mediatek:mt6639:-:::::::* cpe:2.3:o:openwrt:openwrt:21.02.0:-:::::: cpe:2.3:h:mediatek:mt8115:-:::::::* cpe:2.3:h:mediatek:mt8113:-:::::::* cpe:2.3:h:mediatek:mt8390:-:::::::* cpe:2.3:h:mediatek:mt8169:-:::::::* cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:h:mediatek:mt2718:-:::::::* cpe:2.3:h:mediatek:mt8391:-:::::::* cpe:2.3:h:mediatek:mt8195:-:::::::* cpe:2.3:h:mediatek:mt6985:-:::::::* cpe:2.3:h:mediatek:mt8678:-:::::::* cpe:2.3:h:mediatek:mt6653:-:::::::* cpe:2.3:h:mediatek:mt8676:-:::::::* cpe:2.3:h:mediatek:mt6990:-:::::::* cpe:2.3:h:mediatek:mt7925:-:::::::* cpe:2.3:a:mediatek:software_development_kit:::::::: cpe:2.3:h:mediatek:mt8516:-:::::::* cpe:2.3:h:mediatek:mt8168:-:::::::* cpe:2.3:h:mediatek:mt8792:-:::::::* cpe:2.3:h:mediatek:mt8173:-:::::::* cpe:2.3:h:mediatek:mt8698:-:::::::* cpe:2.3:h:mediatek:mt8395:-:::::::* cpe:2.3:h:mediatek:mt7927:-:::::::* cpe:2.3:o:google:android:14.0:::::::* cpe:2.3:h:mediatek:mt8370:-:::::::* cpe:2.3:o:openwrt:openwrt:23.05:::::::* cpe:2.3:h:mediatek:mt8127:-:::::::* cpe:2.3:h:mediatek:mt6991:-:::::::* cpe:2.3:h:mediatek:mt8183:-:::::::* cpe:2.3:h:mediatek:mt8696:-:::::::* cpe:2.3:h:mediatek:mt8196:-:::::::* cpe:2.3:h:mediatek:mt8786:-:::::::* cpe:2.3:h:mediatek:mt8188:-:::::::* cpe:2.3:h:mediatek:mt6989:-:::::::* cpe:2.3:h:mediatek:mt8893:-:::::::* cpe:2.3:h:mediatek:mt8163:-:::::::* cpe:2.3:h:mediatek:mt8186:-:::::::* cpe:2.3:o:google:android:15.0:::::::* cpe:2.3:h:mediatek:mt8512:-:::::::* cpe:2.3:h:mediatek:mt8519:-:::::::* cpe:2.3:h:mediatek:mt8796:-:::::::* cpe:2.3:h:mediatek:mt8695:-:::::::*

08 Jul 2025, 15:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
Summary		(es) En el firmware de Bluetooth, existe un posible fallo del sistema debido a una excepción no detectada. Esto podría provocar una denegación de servicio remota sin necesidad de privilegios de ejecución adicionales. No se requiere la interacción del usuario para su explotación. ID de parche: ALPS09752821; ID de problema: MSV-3342.