CVE-2025-20633

Name of the Vulnerable Software and Affected Versions MediaTek MT7603/MT7615/MT7622/MT7915 versions up to 7.4.0.1

Description In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For MediaTek MT7603/MT7615/MT7622/MT7915 versions up to 7.4.0.1, update to a version that includes the patch for issue ID MSV-2491 and patch ID WCNCR00400889 to resolve the issue. As a temporary workaround, consider restricting access to the WLAN AP driver to minimize the risk of exploitation.