PT-2025-44967 · Qualcomm · Qualcomm Wlan Driver

Published 2025-11-04 · Updated 2025-11-04 · CVE-2025-20728

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qualcomm wlan STA driver (affected versions not specified)

Description An out-of-bounds write issue exists in the wlan STA driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring User execution privileges. User interaction is not needed for exploitation.

Recommendations Apply patch WCNCR00447115.

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2025-20728

Affected Products

Qualcomm Wlan Driver

References · 5

• https://corp.mediatek.com/product-security-bulletin/November-2025 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20728 · Security Note
• https://t.me/CVEtracker/36483 · Telegram Post
• https://t.me/cveNotify/141507 · Telegram Post