VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 7, 2025· Updated Jun 17, 2026

CVE-2025-20654

CVE-2025-20654

Description

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Mediatek/Software Development Kit
    cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*
    Range: <=7.4.0.1
  • Mediatek/Mt6890
    cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
  • Mediatek/MT7622
    cpe:2.3:h:mediatek:mt7622:-:*:*:*:*:*:*:*
  • Mediatek/MT7915
    cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*
  • Mediatek/Mt7916
    cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*
  • Mediatek/Mt7981
    cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*
  • Mediatek/Mt7986
    cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*
  • Openwrt/Openwrt2 versions
    cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
    • cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
  • Mediatek/wlan servicellm-fuzzy
  • MediaTek, Inc./MT6890, MT7622, MT7915, MT7916, MT7981, MT7986v5
    Range: SDK version 7.4.0.1 and before (for MT7622 and MT7915) / SDK version 7.6.7.0 and before (for MT7916, MT7981 and MT7986) / OpenWrt 19.07, 21.02 (for MT6890)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.