SB2025061258 - Multiple vulnerabilities in Lenovo MediaTek wLAN driver

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) NULL Pointer Dereference (CVE-ID: CVE-2025-20673)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an uncaught exception within wlan. A local application can perform service disruption.

2) NULL Pointer Dereference (CVE-ID: CVE-2025-20675)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an uncaught exception within wlan. A local application can perform service disruption.

3) NULL Pointer Dereference (CVE-ID: CVE-2025-20676)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an uncaught exception within wlan. A local application can perform service disruption.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://support.lenovo.com/us/en/product_security/LEN-195072