CVE-2025-20664 is a high-severity information disclosure vulnerability affecting MediaTek Wi-Fi AP drivers (MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, and their SDKs). It stems from an uncaught exception, allowing remote, adjacent attackers to disclose sensitive information without user interaction or additional privileges. With a CVSS score of 7.5, this vulnerability presents a significant risk, though there is currently no evidence of active exploitation, public exploit code, or widespread community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 7.4.0.1CPE matchmatch criteria | cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:* | ||
<= 7.6.7.2CPE matchmatch criteria | cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.