Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20728

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.

Published

2025-11-04T07:15:35.100

Last Modified

2025-11-05T17:14:09.840

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-122
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediatek software_development_kit 3.7 Yes
Hardware mediatek mt7902 - No
Hardware mediatek mt7920 - No
Hardware mediatek mt7921 - No
Hardware mediatek mt7922 - No
Hardware mediatek mt7925 - No
Hardware mediatek mt7927 - No
References