CVE-2025-20684

critical · 9.8

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.

9.8

CVSS

0.5%

EPSS (exploit prob.)

44th

EPSS percentile

2025-07-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
mediatek	software_development_kit	<= 5.1.0.0
mediatek	mt7615	all versions
mediatek	mt7622	all versions
mediatek	mt7663	all versions

Check a specific version with /api/v1/cve/match.

References

https://corp.mediatek.com/product-security-bulletin/July-2025

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-20684