CVE-2025-20740
BaseFortify
Publication date: 2025-11-04
Last updated on: 2025-11-05
Assigner: MediaTek, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mediatek | software_development_kit | to 3.7 (inc) |
| mediatek | mt7902 | * |
| mediatek | mt7920 | * |
| mediatek | mt7921 | * |
| mediatek | mt7922 | * |
| mediatek | mt7925 | * |
| mediatek | mt7927 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-367 | The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out of bounds read in the wlan STA driver caused by a race condition. It allows an attacker with user execution privileges to potentially read memory outside the intended bounds, leading to local information disclosure. Exploitation does not require user interaction.
How can this vulnerability impact me? :
The vulnerability can lead to local information disclosure, meaning sensitive data could be exposed to an attacker who has user-level execution privileges on the affected system. This could compromise confidentiality of information stored or processed by the device.