MediaTek vulnerabilities and threats

306 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.2%	CVE-2025-20689MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20689 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479. EPSS 0.2%Vulnerability CWE-125	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.2%	CVE-2025-20688MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20688 In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480. EPSS 0.2%Vulnerability CWE-125	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.2%	CVE-2025-20687MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 · Out-of-bounds Read Medium5.5EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20687 In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481. EPSS 0.2%Vulnerability CWE-125	CVE Database V5	2025-07-08
High	8.8	EPSS 0.4%	CVE-2025-20686MediaTek MT6890, MT7915, MT7916, MT7981, MT7986 · Heap Overflow High8.8EPSS 0.4%2025-07-08CVE Database V5CVE-2025-20686 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404. EPSS 0.4%Vulnerability CWE-122	CVE Database V5	2025-07-08
High	8.8	EPSS 0.4%	CVE-2025-20685MediaTek MT6890, MT7915, MT7916, MT7981, MT7986 · Heap Overflow High8.8EPSS 0.4%2025-07-08CVE Database V5CVE-2025-20685 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409. EPSS 0.4%Vulnerability CWE-122	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20684MediaTek MT7615, MT7622, MT7663 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20684 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422. EPSS 0.6%Vulnerability CWE-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20683MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20683 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444. EPSS 0.6%Vulnerability CWE-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20682MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20682 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445. EPSS 0.6%Vulnerability CWE-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.6%	CVE-2025-20681MediaTek MT6890, MT7615, MT7622, MT7663, MT7915 · Out-of-bounds Write Critical9.8EPSS 0.6%2025-07-08CVE Database V5CVE-2025-20681 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446. EPSS 0.6%Vulnerability CWE-787	CVE Database V5	2025-07-08
Critical	9.8	EPSS 0.8%	CVE-2025-20680MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 · Heap Overflow Critical9.8EPSS 0.8%2025-07-08CVE Database V5CVE-2025-20680 In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482. EPSS 0.8%Vulnerability CWE-122	CVE Database V5	2025-07-08
Medium	6.5	EPSS 0.4%	CVE-2025-20678MediaTek MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 · Uncontrolled Recursion Medium6.5EPSS 0.4%2025-06-02CVE Database V5CVE-2025-20678 In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739. EPSS 0.4%Vulnerability CWE-674	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20677MediaTek MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20677 In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412256; Issue ID: MSV-3284. EPSS 0.2%Vulnerability CWE-476	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20676MediaTek MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20676 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293. EPSS 0.2%Vulnerability CWE-476	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20675MediaTek MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20675 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302. EPSS 0.2%Vulnerability CWE-476	CVE Database V5	2025-06-02
Critical	9.8	EPSS 0.8%	CVE-2025-20674MediaTek MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993 · Incorrect Authorization Critical9.8EPSS 0.8%2025-06-02CVE Database V5CVE-2025-20674 In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. EPSS 0.8%Vulnerability CWE-863	CVE Database V5	2025-06-02
Medium	5.5	EPSS 0.2%	CVE-2025-20673MediaTek MT7902, MT7921, MT7922, MT7925, MT7927 · NULL Pointer Dereference Medium5.5EPSS 0.2%2025-06-02CVE Database V5CVE-2025-20673 In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413200; Issue ID: MSV-3304. EPSS 0.2%Vulnerability CWE-476	CVE Database V5	2025-06-02
Critical	9.8	EPSS 0.6%	CVE-2025-20672MediaTek MT7902, MT7921, MT7922, MT7925, MT7927 · Heap Overflow Critical9.8EPSS 0.6%2025-06-02CVE Database V5CVE-2025-20672 In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292. EPSS 0.6%Vulnerability CWE-122	CVE Database V5	2025-06-02
Medium	6.7	EPSS <0.1%	CVE-2025-20662MediaTek MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20662 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-04-07
Medium	6.7	EPSS <0.1%	CVE-2025-20661MediaTek MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20661 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-04-07
Medium	6.7	EPSS <0.1%	CVE-2025-20660MediaTek MT9972 · Out-of-bounds Read Medium6.7EPSS <0.1%2025-04-07CVE Database V5CVE-2025-20660 In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186. EPSS <0.1%Vulnerability CWE-125	CVE Database V5	2025-04-07

Page 14 of 16