← Back

CVE-2025-20712

nvd nist
Published: Oct 14, 2025Modified: Oct 16, 2025

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.

Affected (3)

Mediatek
1 product
Software Development Kit
Openwrt
1 product
Openwrt
Configuration A
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Software Development Kit
Up to 8.3.1.1
Running on/withPlatform Versions
Mediatek
Mt7990
All versions
Mediatek
Mt7991
All versions
Mediatek
Mt7992
All versions
Mediatek
Mt7993
All versions
Configuration B
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Openwrt
Openwrt
Version 21.02.0
Openwrt
Version 23.05
Running on/withPlatform Versions
Mediatek
Mt6990
All versions

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.