CVE-2025-20728: high-severity vulnerability in MediaTek, Inc. MT7902, MT7920, MT7921, MT7922…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.1%
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
MediaTek, Inc. · MT7902, MT7920, MT7921, MT7922, MT7925, MT7927Related CVEs — MediaTek, Inc. MT7902, MT7920, MT7921, MT7922…
In the same product, most dangerous first.