MediaTek, a leading provider of chipset technology for smartphones, tablets, AIoT, and smart TVs, has released critical patches addressing several security vulnerabilities across its product portfolio.
The newly published MediaTek Product Security Bulletin details the flaws, their potential impacts, and the extensive range of affected devices.
Device manufacturers were notified of these vulnerabilities and provided security patches at least two months before the public disclosure.
The security risks were assessed using the Common Vulnerability Scoring System version 3.1 (CVSS v3.1).
| CVE | Title | Severity | Type |
| CVE-2025-20666 | Reachable assertion in Modem | High | DoS |
| CVE-2025-20667 | Inadequate encryption strength in Modem | Medium | Info Disclosure (ID) |
| CVE-2025-20671 | Out-of-bounds write in thermal | Medium | Elevation of Priv. |
| CVE-2025-20668 | Out-of-bounds write in scp | Medium | Elevation of Priv. |
| CVE-2025-20670 | Improper certificate validation in Modem | Medium | Info Disclosure (ID) |
| CVE-2025-20665 | File and directory info exposure in devinfo | Medium | Info Disclosure (ID) |
Of particular concern is CVE-2025-20666, which may allow an attacker to trigger a remote denial-of-service simply by connecting a user device to a malicious base station.
Also notable are multiple medium-severity vulnerabilities, including encryption weaknesses and improper certificate handling that could expose sensitive information under specific conditions.
MediaTek has coordinated with OEMs to ensure patch availability ahead of disclosure, minimizing exposure risks for users.
The company recommends all device owners install the latest firmware as soon as it becomes available.
Experts advise users to:
MediaTek’s continued transparency and prompt action demonstrate a commitment to device security.
Users are urged to stay proactive in keeping their devices secure by applying available updates and following best security practices.
Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…