CVE-2025-20733: High severity MediaTek Software Development Kit vulnerability
Published Nov 4, 2025
·Updated
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138.
Affected Software
11 affected components
All of the following
Any of the following
MediaTek Software Development Kit<=7.6.7.2
OpenWrt OpenWrt=19.07.0
OpenWrt OpenWrt=21.02.0
Any of the following
MediaTek Mt6890
MediaTek MT7615
MediaTek MT7622
MediaTek Mt7663
MediaTek MT7915
MediaTek Mt7916
MediaTek Mt7981
MediaTek Mt7986
Event History
Nov 4, 2025
CVE Published
via MITRE·06:19 AM
Data Sourced
via MITRE·06:19 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20733?
CVE-2025-20733 has a high severity rating due to the risk of local privilege escalation.
2
How do I fix CVE-2025-20733?
To fix CVE-2025-20733, apply the patch identified as WCNCR00441509.
3
What software versions are affected by CVE-2025-20733?
CVE-2025-20733 affects MediaTek Software Development Kit versions up to 7.6.7.2 and OpenWrt versions 19.07.0 and 21.02.0.
4
Is user interaction required for exploiting CVE-2025-20733?
No, user interaction is not needed to exploit CVE-2025-20733.
5
What could be the outcome of exploiting CVE-2025-20733?
Exploiting CVE-2025-20733 could lead to local escalation of privileges.