medium6.5
CVE-2025-20649
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check.
Impact
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Software Development Kit | through 3.6 |
| Openwrt | Openwrt | Version 23.05 |