CVE-2025-20649
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Analyzed - security@mediatek.com
- Published
- 2025-03-03
- Last modified
- 2025-03-04
- Weaknesses
- CWE-280
Affected products
- Software Development Kit (Mediatek)
- Mt6880 (Mediatek Inc.)
- Mt6890 (Mediatek Inc.)
- Mt6980 (Mediatek Inc.)
- Mt6990 (Mediatek Inc.)
- Mt7663 (Mediatek Inc.)
- Mt7902 (Mediatek Inc.)
- Mt7925 (Mediatek Inc.)
- Mt7927 (Mediatek Inc.)
- Mt7961 (Mediatek Inc.)
- Openwrt (Openwrt)
References
- https://corp.mediatek.com/product-security-bulletin/March-2025
