CVE-2025-20729: software development kit through 7.6.7.2 (inclusive); +2 more affected products

Affected technology

software development kit · through 7.6.7.2 (inclusive)
mediatek

openwrt · 19.07.0
openwrt

openwrt · 21.02.0
openwrt

MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 · SDK release 7.6.7.2 and before / openWRT 19.07, 21.02
MediaTek, Inc.

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Local · High privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.2/10) rates confidentiality, integrity and availability impact as low. Source advisory’s CVSS 3.1 assessment (base score 4.2/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.