Mt7986

3 CVEs product

Monthly

CVE-2025-20664 HIGH This Week

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Software Development Kit Mt7915 Mt7916 Mt7981 +3
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2025-20663 HIGH This Week

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Software Development Kit Mt7915 Mt7916 Mt7981 +1
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2025-20654 CRITICAL Act Now

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow RCE Software Development Kit Mt7622 +6
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2025-20664
EPSS 0% CVSS 7.5
HIGH This Week

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Software Development Kit Mt7915 +5
NVD
CVE-2025-20663
EPSS 0% CVSS 7.5
HIGH This Week

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Software Development Kit Mt7915 +3
NVD
CVE-2025-20654
EPSS 1% CVSS 9.8
CRITICAL Act Now

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow RCE +8
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy