MediaTek, Inc. MT7902, MT7920, MT7921, MT7922, MT7925, MT7927

• CVE-2025-20740 Medium 4.7 In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not neede 0.1%
• CVE-2025-20728 High 7.8 In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction i 0.1%
• CVE-2025-20687 Medium 5.5 In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not 0.2%
• CVE-2025-20680 Critical 9.8 In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction 0.8%