← Database

CVE-2025-20649

MEDIUM CVSS: 6.5 Published: 2025-03-03 Modified: 2026-06-17

Description

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.

Affected Platforms

Mediatek Mt6990Mediatek Mt7961Mediatek Mt7927Mediatek Mt7663Mediatek Software Development KitMediatek Mt6890Mediatek Mt7925Mediatek Mt6980Openwrt OpenwrtMediatek Mt7902

Weakness Type

CWE-280, NVD-CWE-noinfo

References