PT-2025-44974 · Cisco · Cisco Wlan Ap Driver

Published 2025-11-04 · Updated 2026-01-06 · CVE-2025-20735

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco WLAN AP Driver (affected versions not specified)

Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for local escalation of privilege, requiring User execution privileges. User interaction is not required for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2025-20735

Affected Products

Cisco Wlan Ap Driver

References · 6

• https://osv.dev/vulnerability/CVE-2025-20735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20735 · Security Note
• https://corp.mediatek.com/product-security-bulletin/November-2025 · Vendor Advisory
• https://t.me/cveNotify/141514 · Telegram Post
• https://twitter.com/ksg93rd/status/2008559359249240364 · Twitter Post
• https://t.me/CVEtracker/36490 · Telegram Post