CVE-2025-20646

critical · 9.8

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803.

9.8

CVSS

0.9%

EPSS (exploit prob.)

58th

EPSS percentile

2025-03-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
mediatek	software_development_kit	< 7.6.7.2
mediatek	mt6890	all versions
mediatek	mt7915	all versions
mediatek	mt7916	all versions
mediatek	mt7981	all versions
mediatek	mt7986	all versions

Check a specific version with /api/v1/cve/match.

References

https://corp.mediatek.com/product-security-bulletin/March-2025

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-20646