MediaTek MT7986 vulnerabilities

4 CVEs affecting MediaTek MT7986, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20664, published 2025-04-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20137, published 2024-12-02. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges…
CVE-2025-20654, published 2025-04-07. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is…
CVE-2025-20664, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution…
CVE-2025-20663, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution…