CVE-2025-20711
14.10.2025, 10:15
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422399; Issue ID: MSV-3748.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mediatek | software_development_kit | 𝑥 ≤ 7.6.7.2 |
| openwrt | openwrt | 19.07.0 |
| openwrt | openwrt | 21.02.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-1287 - Improper Validation of Specified Type of InputThe product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.