CVE-2025-20674

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
MediaTek, Inc.MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993SDK release 7.6.7.2 and before / OpenWrt 19.07, 21.02 (MT6890) / OpenWrt 21.02, 23.05 (MT6990)

References

Timeline

Published
Jun 2, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-206755.5In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execCVE-2025-206765.5In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execCVE-2025-206775.5In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User exeCVE-2025-206786.5In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has cCVE-2025-20685.0An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a locCVE-2025-206809.8In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilCVE-2025-206819.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206829.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206839.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206849.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206858.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cCVE-2025-206868.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) c
CVE-2025-20674: Critical severity, CVSS 9.8 | Vulnix