CVE-2025-20673

The MediaTek wlan STA driver microprogramming software is vulnerable to a pointer assignment error leading to an uncaught exception . This flaw can result in a system crash , causing a local denial of service (DoS). Exploitation requires User execution privileges but does not require user interac...

CVE-2025-20672

A vulnerability exists in the Bluetooth driver for MediaTek chips due to an incorrect bounds check resulting in a possible out-of-bounds write in dynamic memory. This flaw allows an attacker with user execution privileges to achieve local escalation of privilege without requiring user interaction...

CVE-2026-20456

A missing bounds check in the wlan STA driver of MediaTek Chipsets can lead to a system crash. This vulnerability allows for a local denial of service (DoS) and requires user execution privileges for exploitation, though no user interaction is necessary. Remediation is available via Patch ID: WCN...

CVE-2026-20482

A vulnerability exists in the wlan STA FW where the system can become unresponsive due to logging issues. This flaw could lead to a remote (proximal/adjacent) denial of service without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: WCNCR00486...

CVE-2025-20675

A vulnerability exists in the wlan STA driver microprogramming software of MediaTek chipsets. The root cause is an uncaught exception triggered by pointer assignment errors , which can lead to a system crash resulting in a local denial of service . Exploitation requires User execution privileges ...

CVE-2026-20495

A permission bypass exists in the Bluetooth driver due to a missing permission check . This vulnerability allows for a local escalation of privilege requiring only user execution privileges, with no user interaction required for exploitation. Remediation is available via Patch ID: WCNCR00488300 (...