VDB

CVE-2025-20694

CVE-2025-20694 PUBLISHED CVSS 7.5 HIGH

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.

EPSS 0.16% · 5.6th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.16%
5.6th percentile

Affected Products

VendorProductVersions
mediateksoftware_development_kit0
googleandroid15.0, 13.0, 14.0
openwrtopenwrt21.02.0, 23.05
MediaTek, Inc.MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT7925, MT7927, MT8113, MT8115, MT8127, MT8163, MT8168, MT8169, MT8173, MT8183, MT8186, MT8188, MT8195, MT8196, MT8370, MT8390, MT8391, MT8395, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8786, MT8792, MT8796, MT8893Android 13.0, 14.0, 15.0 / SDK release 3.7 and before / openWRT 21.02, 23.05

Timeline

  • Nov 1, 2024 CVE ID Reserved
  • Jul 8, 2025 EPSS Score
  • Jul 8, 2025 Coalition ESS Score
  • Jul 8, 2025 Coalition ESS Score
  • Jul 8, 2025 CVE Published
  • Jul 8, 2025 PoC Published
  • Jul 9, 2025 Coalition ESS Score
  • Jul 14, 2025 Coalition ESS Score
  • Jul 14, 2025 CVE Updated
  • Jul 18, 2025 EPSS Score
  • Jul 22, 2025 PoC Published
  • Jul 27, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›