6.7
Medium
CVE-2026-20436 In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check
Description
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID: MSV-5970.
Affected products and versions
Other CVEs of MT7902
The 4 CVEs of MT7902 →
CVE-2026-20423
In wlan STA driver, there is a possible out of bounds write due to a missing bounds check
7.8
High
CVE-2026-20419
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception
6.5
Medium
CVE-2026-20407
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check
9.3
Critical