VDB
CVE-2025-20693
CVE-2025-20693
PUBLISHED
CVSS 6.5 MEDIUM
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421.
EPSS 0.13% · 2.8th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.13%
2.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 15.0, 13.0, 14.0 | |
| mediatek | software_development_kit | 0 |
| MediaTek, Inc. | MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6985, MT6989, MT6990, MT6991, MT7902, MT7920, MT7921, MT7922, MT7923, MT7925, MT7927, MT7932, MT8196, MT8678, MT8796, MT8893 | * |
| openwrt | openwrt | 23.05, 21.02.0 |
| linuxfoundation | yocto | 4.0 |
Timeline
- Nov 1, 2024 CVE ID Reserved
- Jul 8, 2025 EPSS Score
- Jul 8, 2025 Coalition ESS Score
- Jul 8, 2025 Coalition ESS Score
- Jul 8, 2025 CVE Published
- Jul 8, 2025 PoC Published
- Jul 8, 2025 CVE Updated
- Jul 9, 2025 Coalition ESS Score
- Jul 18, 2025 EPSS Score
- Jul 27, 2025 EPSS Score
- Aug 6, 2025 EPSS Score
- Aug 15, 2025 EPSS Score