Skip to content
Sign in
4.2 Medium

CVE-2025-20732 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitable with local access to the machine, with an administrator account and without any user action; the impact on data or service is limited.

Attack vector
Local
Attack complexity
Low
Privileges required
High
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Versions not published

Other CVEs of MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986

The 26 CVEs of MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 →
CVE-2025-20748 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check 6.7 Medium CVE-2025-20741 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check 6.7 Medium CVE-2025-20739 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check 6.7 Medium CVE-2025-20738 In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check 6.7 Medium
Track this CVE