← Database

CVE-2025-20674

CRITICAL CVSS: 9.8 Published: 2025-06-02 Modified: 2026-06-17

Description

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303.

Affected Platforms

Mediatek Mt6990Mediatek Mt7990Mediatek Software Development KitMediatek Mt7915Mediatek Mt7981Mediatek Mt6890Openwrt OpenwrtMediatek Mt7993Mediatek Mt7916Mediatek Mt7992

Weakness Type

CWE-863

References