Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20672

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292.

Published

2025-06-02T03:15:24.443

Last Modified

2025-07-02T15:41:26.327

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-122
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System mediatek mt7902_firmware ≤ 3.6 Yes
Hardware mediatek mt7902 - No
Operating System mediatek mt7921_firmware ≤ 3.6 Yes
Hardware mediatek mt7921 - No
Operating System mediatek mt7922_firmware ≤ 3.6 Yes
Hardware mediatek mt7922 - No
Operating System mediatek mt7925_firmware ≤ 3.6 Yes
Hardware mediatek mt7925 - No
Operating System mediatek mt7927_firmware ≤ 3.6 Yes
Hardware mediatek mt7927 - No
References