InfoSecBulletin Cybersecurity for mankind
MediaTek has released its March 2025 Product Security Bulletin, which highlights new security vulnerabilities affecting various chipsets in smartphones, tablets, AIoT devices, smart displays, OTT hardware, computer vision platforms, audio systems, and smart TVs.
The bulletin reports 10 vulnerabilities, three of which are high severity. The high-severity ones could enable attackers to cause denial of service or escalate privileges.
10 New Vulnerabilities Discovered in MediaTek Chipsets
Qualcomm’s March 2025 Security Bulletin Highlights Major Vulns
Cyberattack detected at Polish space agency, minister says
Nearly 12,000 API Keys and Passwords Found in Public Datasets
Android Phone’s Unlocked Using Cellebrite’s Zero-day Exploit
DragonForce Ransomware Targets Saudi Company, 6TB Data Stolen
Microsoft Uncovers Hackers Selling Illegal Azure AI Access
By 2025, India’s First Semiconductor Chip to be ready
CVE-2025-20111
Cisco Warns Vulns in Nexus 3000 and 9000 Series Switches
CVE-2025-0475 & CVE-2025-0555
GitLab’s High-Risk Flaw, Patch Now Urgently!
Three high-severity vulnerabilities have been identified: CVE-2025-20644, CVE-2025-20645, and CVE-2025-20646. Each poses unique risks.
CVE-2025-20644 (Modem – Denial of Service)
Certain versions of Modem software have a syntactic error that can lead to memory corruption and cause remote denial of service (DoS). In severe cases, an attacker could take control of a rogue base station and disconnect a device without the user being aware.
CVE-2025-20645 (KeyInstall – Escalation of Privilege)
Missing bounds checks in KeyInstall can result in out-of-bounds writes. Although an attacker needs System privileges for local privilege escalation, this can lead to unauthorized code execution, compromising core system protections.
CVE-2025-20646 (wlan AP FW – Remote Escalation of Privilege)
A vulnerability in WLAN firmware could allow remote privilege escalation through out-of-bounds writes without any user interaction. This poses a significant risk for Wi-Fi devices in both consumer and enterprise environments.
The bulletin highlights that several popular chipsets, including the MT67xx, MT68xx, and MT69xx series, as well as AIoT solutions, are affected. MediaTek supplied patches to device manufacturers two months before the announcement, allowing them to release over-the-air updates and include fixes in system patches.
Users should promptly update their devices with the latest security updates.
Qualcomm’s March 2025 Security Bulletin Highlights Major Vulns
