CVE-2025-20631: High severity mediatek linkit software development kit vulnerability
Published Feb 3, 2025
·Updated
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187.
Affected Software
8 affected components
All of the following
MediaTek Software Development Kit<=7.6.7.2
Any of the following
MediaTek MT7615
MediaTek MT7622
MediaTek Mt7663
MediaTek MT7915
MediaTek Mt7916
MediaTek Mt7981
MediaTek Mt7986
Event History
Feb 3, 2025
CVE Published
via MITRE·03:23 AM
Data Sourced
via MITRE·03:23 AM
DescriptionWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20631?
CVE-2025-20631 is classified as a high severity vulnerability due to its potential for local escalation of privilege.
2
How do I fix CVE-2025-20631?
To fix CVE-2025-20631, apply the relevant security patch identified as WCNCR00397141.
3
What products are affected by CVE-2025-20631?
CVE-2025-20631 affects several MediaTek software development kits up to version 7.6.7.2.
4
Is user interaction required to exploit CVE-2025-20631?
No, user interaction is not needed for exploiting CVE-2025-20631.
5
What type of vulnerability is CVE-2025-20631?
CVE-2025-20631 is an out of bounds write vulnerability caused by an incorrect bounds check.