CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-20646: In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no...

Description

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803.

Classification

CVE ID: CVE-2025-20646

Problem Types

CWE-787 Out-of-bounds Write

Affected Products

Vendor: MediaTek, Inc.

Product: MT6890, MT7915, MT7916, MT7981, MT7986

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.24% (probability of being exploited)

EPSS Percentile: 44.18% (scored less or equal to compared to others)

EPSS Date: 2025-03-31 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-20646
https://corp.mediatek.com/product-security-bulletin/March-2025

Timeline

2025-03-03 03:40:11 UTC
CVE

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no...