PT-2025-44972 · Aruba · Aruba Wlan Ap Driver

Published 2025-11-04 · Updated 2026-01-06 · CVE-2025-20733

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver (affected versions not specified)

Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring User execution privileges. User interaction is not required for exploitation.

Recommendations Apply Patch ID WCNCR00441509.

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2025-20733

Affected Products

Aruba Wlan Ap Driver

References · 6

• https://osv.dev/vulnerability/CVE-2025-20733 · Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/November-2025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20733 · Security Note
• https://t.me/CVEtracker/36488 · Telegram Post
• https://twitter.com/ksg93rd/status/2008559359249240364 · Twitter Post
• https://t.me/cveNotify/141512 · Telegram Post