CVEvulnerability

CVE-2025-20672

9.8 CRITICAL Published 2025-06-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-122

Description

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292.

Affected configurations

• mediatek mt7902 firmware (<= 3.6) • mediatek mt7921 firmware (<= 3.6) • mediatek mt7922 firmware (<= 3.6) • mediatek mt7925 firmware (<= 3.6) • mediatek mt7927 firmware (<= 3.6)

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References