CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-20633: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code...
8.8
CVSS
Description
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491.
Classification
CVE ID: CVE-2025-20633
CVSS Base Severity: HIGH
CVSS Base Score: 8.8
CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
Vendor: MediaTek, Inc.
Product: MT7603, MT7615, MT7622, MT7915
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 24.75% (scored less or equal to compared to others)
EPSS Date: 2025-03-04 (when was this score calculated)