← Back

CVE-2025-20710

nvd nist
Published: Oct 14, 2025Modified: Oct 16, 2025

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418785; Issue ID: MSV-3515.

Affected (3)

Mediatek
1 product
Software Development Kit
Openwrt
1 product
Openwrt
Configuration A
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Software Development Kit
Up to 7.6.7.2
Running on/withPlatform Versions
Mediatek
Mt7915
All versions
Mediatek
Mt7916
All versions
Mediatek
Mt7981
All versions
Mediatek
Mt7986
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openwrt
Openwrt
Version 19.07.0
Openwrt
Version 21.02.0
Running on/withPlatform Versions
Mediatek
Mt6890
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.