CVE-2025-20724: Medium severity MediaTek Software Development Kit vulnerability
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch WCNCR00418894
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20724?
CVE-2025-20724 has a severity rating that indicates a moderate risk of local information disclosure under certain conditions.
How do I fix CVE-2025-20724?
To fix CVE-2025-20724, apply the patch identified by Patch ID WCNCR00418894.
Which software is affected by CVE-2025-20724?
CVE-2025-20724 affects the MediaTek Software Development Kit versions up to and including 7.6.7.2 and specific versions of OpenWrt.
Does CVE-2025-20724 require user interaction for exploitation?
No, user interaction is not required for the exploitation of CVE-2025-20724.
Who is responsible for the security of CVE-2025-20724?
MediaTek is responsible for addressing the security issue identified in CVE-2025-20724.