PT-2025-41874 · Unknown · Wlan Ap Driver

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-20718

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wlan AP driver (affected versions not specified)

Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege. User execution privileges are needed for exploitation, and user interaction is not required.

Recommendations Apply patch WCNCR00419945.

Fix

LPE

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2025-20718

Affected Products

Wlan Ap Driver

References · 6

• https://osv.dev/vulnerability/CVE-2025-20718 · Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/October-2025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20718 · Security Note
• https://t.me/CVEtracker/34840 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1978084802344394870 · Twitter Post
• https://twitter.com/CVEnew/status/1978032061878333495 · Twitter Post