CVE-2025-20687

MEDIUM

mediatek nbiot_sdk < 3.6 - Out-of-bounds Read in Bluetooth Driver

Title source: llm

Description

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue ID: MSV-3481.

References (1)

Core 1

Core References

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/July-2025

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 4.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-125

Status published

Products (1)

mediatek/nbiot_sdk < 3.6

Published Jul 08, 2025

Tracked Since Feb 18, 2026