What is CVE-2025-20637?

CVE-2025-20637 is a high-severity vulnerability in Mediatek Mt7981, classified under CWE-248. CVSS score: 7.5/10. Published 2025-02-03.

How severe is CVE-2025-20637?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mediatek Mt7981

CVE-2025-20637

In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.

EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mediatek Mt7981
Mediatek Mt7986
Mediatek Software_development_kit
Mediatek, Inc. Mt7981, Mt7986 — versions SDK release 7.6.7.0 and before

Weakness classification (CWE)

References

security@mediatek.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-20637?: CVE-2025-20637 is a high-severity vulnerability in Mediatek Mt7981, classified under CWE-248. CVSS score: 7.5/10. Published 2025-02-03.
How severe is CVE-2025-20637?: High severity. CVSS v3 base score is 7.5 out of 10.