Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-20662 State: PUBLISHED Published: 2025-04-07T03:14:58.909Z Last Updated: 2025-04-08T03:55:44.563Z Vendors: MediaTek, Inc. Products: MT9972 Problem Types: CWE-125 Description: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20663 State: PUBLISHED Published: 2025-04-07T03:15:00.594Z Last Updated: 2025-04-07T14:15:18.303Z Vendors: MediaTek, Inc. Products: MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-248 Description: In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-3031. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20664 State: PUBLISHED Published: 2025-04-07T03:15:02.471Z Last Updated: 2025-04-07T14:13:27.872Z Vendors: MediaTek, Inc. Products: MT7915, MT7916, MT7981, MT7986, MT7990, MT7992 Problem Types: CWE-248 Description: In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2025
CVE ID: CVE-2025-20665 State: PUBLISHED Published: 2025-05-05T02:49:18.459Z Last Updated: 2025-05-12T17:58:17.519Z Vendors: MediaTek, Inc. Products: MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8175, MT8195, MT8196, MT8321, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8796, MT8797, MT8798, MT8893 Problem Types: CWE-538 Description: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This coul
: CWE-538 Description: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20666 State: PUBLISHED Published: 2025-05-05T02:49:10.026Z Last Updated: 2025-05-12T17:52:20.411Z Vendors: MediaTek, Inc. Products: MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8666, MT8667, MT8673, MT8675, MT8771, MT8791, MT8791T, MT8795T, MT8797, MT8798 Problem Types: CWE-617 Description: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not nee
gue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00650610; Issue ID: MSV-2933. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20667 State: PUBLISHED Published: 2025-05-05T02:49:11.742Z Last Updated: 2025-05-12T17:50:53.123Z Vendors: MediaTek, Inc. Products: MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991,
5, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8675, MT8676, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8797 Problem Types: CWE-326 Description: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01513293; Issue ID: MSV-2741. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploitation. Patch ID: MOLY01513293; Issue ID: MSV-2741. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20668 State: PUBLISHED Published: 2025-05-05T02:49:15.277Z Last Updated: 2025-05-07T14:57:00.430Z Vendors: MediaTek, Inc. Products: MT6878, MT6897, MT6899, MT6989, MT6991, MT8775, MT8796 Problem Types: CWE-787 Description: In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09625562; Issue ID: MSV-3027. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20670 State: PUBLISHED Published: 2025-05-05T02:49:16.856Z Last Updated: 2025-05-12T17:56:04.826Z Vendors: MediaTek, Inc. Products: MT2737, MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6879, MT6886, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798 Problem Types: CWE-295 Description: In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected t
bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01334347; Issue ID: MSV-2772. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20671 State: PUBLISHED Published: 2025-05-05T02:49:13.461Z Last Updated: 2025-05-07T14:58:37.285Z Vendors: MediaTek, Inc. Products: MT2718, MT6878, MT6897, MT6899, MT6989, MT6991, MT8196, MT8391, MT8676, MT8678 Problem Types: CWE-787 Description: In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09698599; Issue ID: MSV-3228. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/May-2025
CVE ID: CVE-2025-20672 State: PUBLISHED Published: 2025-06-02T02:29:38.368Z Last Updated: 2025-06-03T03:55:08.803Z Vendors: MediaTek, Inc. Products: MT7902, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-122 Description: In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20673 State: PUBLISHED Published: 2025-06-02T02:29:40.056Z Last Updated: 2025-06-02T15:46:35.123Z Vendors: MediaTek, Inc. Products: MT7902, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-476 Description: In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20674 State: PUBLISHED Published: 2025-06-02T02:29:41.639Z Last Updated: 2025-06-03T03:55:10.358Z Vendors: MediaTek, Inc. Products: MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993 Problem Types: CWE-863 Description: In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20675 State: PUBLISHED Published: 2025-06-02T02:29:43.181Z Last Updated: 2025-06-02T15:46:23.715Z Vendors: MediaTek, Inc. Products: MT7902, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-476 Description: In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20676 State: PUBLISHED Published: 2025-06-02T02:29:44.789Z Last Updated: 2025-06-03T17:40:16.458Z Vendors: MediaTek, Inc. Products: MT7902, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-476 Description: In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20677 State: PUBLISHED Published: 2025-06-02T02:29:46.322Z Last Updated: 2025-06-03T17:38:33.780Z Vendors: MediaTek, Inc. Products: MT7902, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-476 Description: In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20678 State: PUBLISHED Published: 2025-06-02T02:29:47.843Z Last Updated: 2025-06-02T15:46:17.386Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673,
896, MT6897, MT6899, MT6980, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 Problem Types: CWE-674 Description: In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739. Additional Analyst Note
ed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/June-2025
CVE ID: CVE-2025-20680 State: PUBLISHED Published: 2025-07-08T02:00:17.457Z Last Updated: 2025-07-11T03:55:24.984Z Vendors: MediaTek, Inc. Products: MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-122 Description: In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20681 State: PUBLISHED Published: 2025-07-08T02:00:19.050Z Last Updated: 2025-07-08T13:59:40.392Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20682 State: PUBLISHED Published: 2025-07-08T02:00:20.671Z Last Updated: 2025-07-08T13:58:27.138Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20683 State: PUBLISHED Published: 2025-07-08T02:00:22.282Z Last Updated: 2025-07-08T13:57:39.694Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20684 State: PUBLISHED Published: 2025-07-08T02:00:23.958Z Last Updated: 2025-07-08T13:56:32.539Z Vendors: MediaTek, Inc. Products: MT7615, MT7622, MT7663 Problem Types: CWE-787 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20685 State: PUBLISHED Published: 2025-07-08T02:00:25.600Z Last Updated: 2025-07-08T15:18:34.704Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20686 State: PUBLISHED Published: 2025-07-08T02:00:27.192Z Last Updated: 2025-07-08T15:18:06.866Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-122 Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20687 State: PUBLISHED Published: 2025-07-08T02:00:28.843Z Last Updated: 2025-07-08T13:51:38.582Z Vendors: MediaTek, Inc. Products: MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 Problem Types: CWE-125 Description: In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20688 State: PUBLISHED Published: 2025-07-08T02:00:30.497Z Last Updated: 2025-07-08T14:21:08.832Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20689 State: PUBLISHED Published: 2025-07-08T02:00:32.084Z Last Updated: 2025-07-08T14:20:07.524Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20690 State: PUBLISHED Published: 2025-07-08T02:00:33.680Z Last Updated: 2025-07-08T14:19:06.620Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Issue ID: MSV-3478. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20691 State: PUBLISHED Published: 2025-07-08T02:00:35.313Z Last Updated: 2025-07-08T14:17:17.403Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20692 State: PUBLISHED Published: 2025-07-08T02:00:36.926Z Last Updated: 2025-07-08T14:16:06.975Z Vendors: MediaTek, Inc. Products: MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Problem Types: CWE-125 Description: In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20693 State: PUBLISHED Published: 2025-07-08T02:00:38.512Z Last Updated: 2025-07-08T14:14:59.180Z Vendors: MediaTek, Inc. Products: MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT6989, MT6990, MT6991, MT7902, MT7920, MT7921, MT7922, MT7923, MT7925, MT7927, MT7932, MT8196, MT8678, MT8796, MT8893 Problem Types: CWE-125 Description: In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421. Additional Analyst Notes: - CISA ADP
action is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20694 State: PUBLISHED Published: 2025-07-08T02:00:40.101Z Last Updated: 2025-07-14T16:33:57.018Z Vendors: MediaTek, Inc. Products: MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113, MT8115, MT8127, MT8163, MT8168, MT8169, MT8173, MT8183, MT8186, MT8188, MT8195, MT8196, MT8370, MT8390, MT8391, MT8395, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8786, MT8792, MT8796, MT8893 Problem Types: CWE-124 Description: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
emote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025
CVE ID: CVE-2025-20695 State: PUBLISHED Published: 2025-07-08T02:00:41.955Z Last Updated: 2025-07-14T16:33:28.111Z Vendors: MediaTek, Inc. Products: MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8196, MT8678, MT8796 Problem Types: CWE-124 Description: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/July-2025