CVE-2025-20695

EPSS 0.16%
Veröffentlicht 08.07.2025 02:00:41
Zuletzt bearbeitet 14.07.2025 17:15:32
Erkennungen
Login

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 4

NVD 6 VulnDex Vulnerability Enrichment 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mediatek ≫ Software Development Kit Version <= 3.7

   Mediatek ≫ Mt6639 Version -
   Mediatek ≫ Mt6653 Version -
   Mediatek ≫ Mt6985 Version -
   Mediatek ≫ Mt6989 Version -
   Mediatek ≫ Mt6990 Version -
   Mediatek ≫ Mt6991 Version -
   Mediatek ≫ Mt7925 Version -
   Mediatek ≫ Mt7927 Version -
   Mediatek ≫ Mt8196 Version -
   Mediatek ≫ Mt8678 Version -
   Mediatek ≫ Mt8796 Version -

Google ≫ Android Version 13.0

Google ≫ Android Version 14.0

Google ≫ Android Version 15.0

Openwrt ≫ Openwrt Version 21.02.0 Update -

Openwrt ≫ Openwrt Version 23.05

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.057

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-124 Buffer Underwrite ('Buffer Underflow')

The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://corp.mediatek.com/product-security-bulletin/July-2025

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20695

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20695

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20695

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-20695