PT-2025-4156 · Mediatek · Mediatek Mt7986+1

Published 2025-02-03 · Updated 2025-02-08 · CVE-2025-20637

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MediaTek MT7981/MT7986 versions up to 7.6.7.0

Description In network hardware, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For MediaTek MT7981/MT7986 versions up to 7.6.7.0, apply the patch with ID WCNCR00399035 to resolve the issue. As a temporary workaround, consider implementing measures to prevent remote denial of service attacks until the patch is applied.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

CWE-248

Related Identifiers

CVE-2025-20637

Affected Products

Mediatek Mt7981

Mediatek Mt7986

References · 11

• https://corp.mediatek.com/product-security-bulletin/February-2025 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20637 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20637 · Security Note
• https://twitter.com/CVEnew/status/1886258620201148714 · Twitter Post
• https://twitter.com/cracbot/status/1887736529063453175 · Twitter Post
• https://twitter.com/cracbot/status/1888181080412606805 · Twitter Post
• https://t.me/cvedetector/17046 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1886307909950173657 · Twitter Post
• https://t.me/cvenotify/109717 · Telegram Post
• https://twitter.com/dailycve/status/1886492556369830029 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1886298061661470812 · Twitter Post