CVE-2025-20695

MEDIUM

Android - Remote Denial of Service via Bluetooth FW Exception

Title source: llm

Description

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.

References (1)

Core 1

Core References

Vendor Advisory

https://corp.mediatek.com/product-security-bulletin/July-2025

Scores

CVSS v3 6.5

EPSS 0.0010

EPSS Percentile 27.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787 CWE-124

Status published

Products (6)

google/android 13.0

google/android 14.0

google/android 15.0

mediatek/software_development_kit < 3.7

openwrt/openwrt 21.02.0

openwrt/openwrt 23.05

Published Jul 08, 2025

Tracked Since Feb 18, 2026