Vulnerabilites related to MediaTek, Inc. - MT7981, MT7986
cve-2025-20637
Vulnerability from cvelistv5
Published
2025-02-03 03:23
Modified
2025-02-18 18:27
Severity ?
EPSS score ?
Summary
In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.
References
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
MediaTek, Inc. | MT7981, MT7986 |
Version: SDK release 7.6.7.0 and before |
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2025-20637", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-02-03T16:18:07.435333Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-02-18T18:27:09.553Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "MT7981, MT7986", "vendor": "MediaTek, Inc.", "versions": [ { "status": "affected", "version": "SDK release 7.6.7.0 and before" } ] } ], "descriptions": [ { "lang": "en", "value": "In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-248", "description": "CWE-248 Uncaught Exception", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-02-03T03:23:54.470Z", "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek" }, "references": [ { "url": "https://corp.mediatek.com/product-security-bulletin/February-2025" } ] } }, "cveMetadata": { "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "assignerShortName": "MediaTek", "cveId": "CVE-2025-20637", "datePublished": "2025-02-03T03:23:54.470Z", "dateReserved": "2024-11-01T01:21:50.363Z", "dateUpdated": "2025-02-18T18:27:09.553Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }