CVE-2025-20672

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412257; Issue ID: MSV-3292...

CVE-2025-20672

A vulnerability exists in the Bluetooth driver for MediaTek chips due to an incorrect bounds check resulting in a possible out-of-bounds write in dynamic memory. This flaw allows an attacker with user execution privileges to achieve local escalation of privilege without requiring user interaction...