Stack-based buffer overflow in MediaTek products - CVE-2025-20747
Published: November 3, 2025
Vulnerability identifier: #VU117909
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-20747
CWE-ID: CWE-121
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: MediaTek
Affected software:
MT2718
MT2737
MT6835
MT6878
MT6886
MT6897
MT6899
MT6982
MT6985
MT6986
MT6986D
MT6989
MT6990
MT6991
MT8676
MT8678
MT8755
MT8893
MT2718
MT2737
MT6835
MT6878
MT6886
MT6897
MT6899
MT6982
MT6985
MT6986
MT6986D
MT6989
MT6990
MT6991
MT8676
MT8678
MT8755
MT8893
Detailed vulnerability description
The vulnerability allows a local application to perform service disruption.
The vulnerability exists due to an incorrect bounds check within gnss. A local application can perform service disruption.
How to mitigate CVE-2025-20747
Install security update from vendor's website.