CVE-2025-20684: Critical severity MediaTek Software Development Kit vulnerability
Published Jul 8, 2025
·Updated
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.
Affected Software
4 affected components
All of the following
MediaTek Software Development Kit<=5.1.0.0
Any of the following
MediaTek MT7615
MediaTek MT7622
MediaTek Mt7663
Event History
Jul 8, 2025
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20684?
CVE-2025-20684 has been classified as a vulnerability that allows for local escalation of privileges due to an out-of-bounds write.
2
How do I fix CVE-2025-20684?
To mitigate CVE-2025-20684, apply the patch ID WCNCR00416939 provided by MediaTek.
3
Which software versions are affected by CVE-2025-20684?
CVE-2025-20684 affects MediaTek Software Development Kit versions up to and including 5.1.0.0.
4
Is user interaction required to exploit CVE-2025-20684?
No, user interaction is not needed for the exploitation of CVE-2025-20684.
5
What kind of device does CVE-2025-20684 impact?
CVE-2025-20684 impacts devices that utilize the MediaTek Software Development Kit.