CVE-2025-20683
critical · 9.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.
9.8
CVSS
0.5%
EPSS (exploit prob.)
40th
EPSS percentile
2025-07-08
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mediatek | software_development_kit | <= 7.6.7.2 |
| openwrt | openwrt | 19.07.0 |
| openwrt | openwrt | 21.02.0 |
| mediatek | mt6890 | all versions |
| mediatek | mt7615 | all versions |
| mediatek | mt7622 | all versions |
| mediatek | mt7663 | all versions |
| mediatek | mt7915 | all versions |
| mediatek | mt7916 | all versions |
| mediatek | mt7981 | all versions |
| mediatek | mt7986 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-20683