First published: Mon Feb 03 2025(Updated: )
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187.
Credit: security@mediatek.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Mediatek Linkit Software Development Kit | <=7.6.7.2 | |
Any of | ||
MediaTek MT7615 Firmware | ||
MediaTek MT7622 Firmware | ||
MediaTek MT7663 Firmware | ||
mediatek mt7915 firmware | ||
MediaTek MT7916 Firmware | ||
MediaTek MT7981 Firmware | ||
MediaTek MT7986 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-20631 is classified as a high severity vulnerability due to its potential for local escalation of privilege.
To fix CVE-2025-20631, apply the relevant security patch identified as WCNCR00397141.
CVE-2025-20631 affects several MediaTek software development kits up to version 7.6.7.2.
No, user interaction is not needed for exploiting CVE-2025-20631.
CVE-2025-20631 is an out of bounds write vulnerability caused by an incorrect bounds check.