CVE-2025-20649
First published: Mon Mar 03 2025(Updated: )
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.
Credit: security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Mediatek Linkit Software Development Kit | <=3.6 | |
| Open edX | =23.05 | |
| Any of | ||
| MediaTek MT6880 | ||
| MediaTek MT6890 | ||
| MediaTek MT6980D | ||
| MediaTek MT6990 | ||
| MediaTek MT7663 Firmware | ||
| MediaTek MT7902 | ||
| Mediatek Mt7925 | ||
| MediaTek MT7927 | ||
| Mediatek Mt7961 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-20649?
CVE-2025-20649 has a medium severity rating due to its potential for information disclosure.
How do I fix CVE-2025-20649?
To mitigate CVE-2025-20649, apply patch ID WCNCR00396437 as suggested by Mediatek.
What does CVE-2025-20649 affect?
CVE-2025-20649 affects the Bluetooth Stack SW within specific versions of MediaTek SDK and OpenWRT.
Can CVE-2025-20649 be exploited without user interaction?
Yes, CVE-2025-20649 can be exploited remotely without any user interaction.
What could be the impact of CVE-2025-20649?
The impact of CVE-2025-20649 is the potential for unauthorized information disclosure in Bluetooth communications.
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- vendor/mediatek
- canonical/mediatek linkit software development kit
- version/mediatek linkit software development kit/3.6
- vendor/openwrt
- canonical/open edx
- version/open edx/23.05
- canonical/mediatek mt6880
- canonical/mediatek mt6890
- canonical/mediatek mt6980d
- canonical/mediatek mt6990
- canonical/mediatek mt7663 firmware
- canonical/mediatek mt7902
- canonical/mediatek mt7925
- canonical/mediatek mt7927
- canonical/mediatek mt7961