Skip to main content

Nbiot Sdk CVE-2025-20687

| EUVDEUVD-2025-20365 MEDIUM
Out-of-bounds Read (CWE-125)
2025-07-08 security@mediatek.com
Information Disclosure Buffer Overflow Denial Of Service Nbiot Sdk
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 16, 2026 - 04:21 euvd
EUVD-2025-20365
Analysis Generated
Mar 16, 2026 - 04:21 vuln.today
CVE Published
Jul 08, 2025 - 03:15 nvd
MEDIUM 5.5

DescriptionCVE.org

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481.

Analysis

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481.

Technical ContextAI

An out-of-bounds memory access occurs when code reads from or writes to memory locations outside the intended buffer boundaries. This vulnerability is classified as Out-of-bounds Read (CWE-125).

RemediationAI

Implement proper bounds checking on all array and buffer accesses. Use memory-safe languages or static analysis tools to detect OOB issues.

More in Nbiot Sdk

View all
CVE-2025-20680 CRITICAL
9.8 Jul 08

In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local

CVE-2022-26437 CRITICAL
9.8 Aug 01

In httpclient, there is a possible out of bounds write due to uninitialized data. Rated critical severity (CVSS 9.8), th
CVE-2026-20407 CRITICAL
9.3 Feb 02

Out-of-bounds write in Android WLAN STA driver due to missing bounds check allows local privilege escalation to System w
CVE-2026-20423 HIGH
7.8 Mar 02

Nbiot Sdk contains a vulnerability that allows attackers to local escalation of privilege with User execution privileges
CVE-2026-20436 MEDIUM
6.7 Mar 02

The Nbiot SDK's wlan STA driver contains a buffer overflow vulnerability due to missing bounds checking that allows priv
CVE-2026-20419 MEDIUM
6.5 Feb 02

An uncaught exception in WLAN AP/STA firmware for NBIoT SDK, OpenWrt, and related development kits enables adjacent netw
CVE-2025-20677 MEDIUM
5.5 Jun 02

In Bluetooth driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of s
CVE-2025-20676 MEDIUM
5.5 Jun 02

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of se

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2016-1646 HIGH POC
8.8
CVE-2025-5777 HIGH POC
7.5
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2025-20687 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy