GCVE - cpe:2.3:h:mediatek:mt7990:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mediatek:mt7990:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mediatek (`eceb6b1d-81fa-55a4-b2be-fe736dad9132`)
Product	Mt7990 (`d7545627-f62a-5c3c-a185-3e3729dcdd8a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-20712`	not_vulnerable	2026-06-08 07:08:49.197921	Details available In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810. Published: 2025-10-14T09:11:30.703Z Updated: 2026-02-26T17:47:43.510Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/October-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-20674`	not_vulnerable	2026-06-08 07:08:49.022758	Details available In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303. Published: 2025-06-02T02:29:41.639Z Updated: 2026-02-26T18:27:45.983Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/June-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-20664`	vulnerable	2026-06-08 07:08:48.942930	Details available In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773. Published: 2025-04-07T03:15:02.471Z Updated: 2025-04-07T14:13:27.872Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/April-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20820`	not_vulnerable	2026-06-08 05:52:46.792016	Details available In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189. Published: 2023-09-04T02:27:15.884Z Updated: 2024-10-09T15:32:54.982Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/September-2023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20820`	vulnerable	2026-06-08 05:52:46.791007	Details available In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189. Published: 2023-09-04T02:27:15.884Z Updated: 2024-10-09T15:32:54.982Z Open on db.gcve.eu Reference links https://corp.mediatek.com/product-security-bulletin/September-2023	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.