CVE-2025-20692

Summary

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986SDK release 7.6.7.2 and before / openWRT 19.07, 21.02affected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References