CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20660

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186...

CVE-2025-20658

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID:...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20660

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186...

CVE-2025-20664

The Wlan AP Driver software driver from MediaTek (specifically identified in Mt7915 context) contains an uncaught exception error in its exception handling. This vulnerability allows a remote attacker to perform information disclosure of sensitive system-protected data without requiring additiona...

CVE-2025-20663

A vulnerability exists in the MediaTek wlan AP driver software due to an uncaught exception in error handling. This flaw allows a remote attacker to perform proximal/adjacent information disclosure , potentially exposing sensitive system data without requiring additional execution privileges or u...

CVE-2025-20662

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184...

CVE-2025-20662

The PlayReady TA component of MediaTek microprogramming software contains an out-of-bounds read vulnerability caused by a missing bounds check . An attacker who has already obtained System privilege could exploit this flaw to achieve local escalation of privilege . This vulnerability requires no ...

CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2025-20658

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID:...

CVE-2025-20656

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423...

CVE-2025-20655

The Keymaster component of MediaTek’s microprogramming software is vulnerable to an out-of-bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this flaw to cause local information disclosure and potentially enhance their privileges or expos...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

CVE-2025-20654

A vulnerability exists in the wlan service of MediaTek Chipsets due to an incorrect bounds check that allows for an out-of-bounds write . This flaw could enable an attacker to achieve remote code execution without requiring additional privileges or user interaction. Impacted products include Medi...

CVE-2025-20654: Out-of-bounds Write

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875...

PT-2025-15168

Name of the Vulnerable Software and Affected Versions DA affected versions not specified Description The component DA within MediaTek firmware has a potential out-of-bounds write issue due to a missing bounds check. Successful exploitation of this issue could allow an attacker to gain local...

PUB-A-364795059

In SAEMMDiscloseMsId of SAEMMRadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post authentication with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-382239029

In validateclockselector of clock.c, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...