Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20712


In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.


Published

2025-10-14T10:15:35.717

Last Modified

2025-10-16T15:22:17.933

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-122

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediatek software_development_kit ≤ 8.3.1.1 Yes
Hardware mediatek mt6990 - No
Hardware mediatek mt7990 - No
Hardware mediatek mt7991 - No
Hardware mediatek mt7992 - No
Hardware mediatek mt7993 - No
Operating System openwrt openwrt 21.02.0 Yes
Operating System openwrt openwrt 23.05 Yes
Hardware mediatek mt6990 - No

References