MediaTek Issues October 2025 Security Bulletin Addressing Multiple High-Severity Vulnerabilities Across Wi-Fi and GNSS Chipsets

MediaTek has published its October 2025 Product Security Bulletin, detailing multiple high-severity and medium-severity flaws across WLAN and GNSS chipsets. Highlights include high-severity issues in WLAN components such as CVE-2025-20712, CVE-2025-20709, CVE-2025-20710 and CVE-2025-20718, with affected chipsets spanning MT6890, MT7915, MT7916, MT7981, MT7986 and older generations like MT7603 and MT7622, where out-of-bounds writes and memory corruption could allow code execution or device crashes.

The GNSS and imgsensor components present medium-severity CVEs, notably CVE-2025-20722 and CVE-2025-20723 affecting MT6835, MT6878, MT6985, MT6989 and related chipsets, and CVE-2025-20721 impacting the imgsensor driver on MT6886, MT6899, MT8195 and MT8793. MediaTek warns that some flaws enable out-of-bounds reads or writes and possible memory corruption, underscoring the risk to devices within wireless range. Users are urged to install the latest firmware updates from device manufacturers to mitigate these vulnerabilities.