Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20680

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044; Issue ID: MSV-3482.

Published

2025-07-08T03:15:26.423

Last Modified

2025-07-14T15:24:01.060

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-122
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediatek nbiot_sdk ≤ 3.6 Yes
Hardware mediatek mt7902 - No
Hardware mediatek mt7920 - No
Hardware mediatek mt7921 - No
Hardware mediatek mt7922 - No
Hardware mediatek mt7925 - No
Hardware mediatek mt7927 - No
References