CVE Feed

    Dashboard / CVE / CVE-2025-20712

    CVE-2025-20712

    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.

    Published:Oct 14, 2025
    Last Modified:Feb 26, 2026
    EPS:Oct 14, 2025
    EPSS Score:0.00036
    CVSS Score:8.8

    Affected Products

    Vendor
    Mediatek
    Product
    Mt6799
    Vendor
    Mediatek
    Product
    Mt6990
    Vendor
    Mediatek
    Product
    Mt6990 Firmware
    Vendor
    Mediatek
    Product
    Mt7990
    Vendor
    Mediatek
    Product
    Mt7990 Firmware
    Vendor
    Mediatek
    Product
    Mt7991
    Vendor
    Mediatek
    Product
    Mt7992
    Vendor
    Mediatek
    Product
    Mt7992 Firmware
    Vendor
    Mediatek
    Product
    Mt7993
    Vendor
    Mediatek
    Product
    Mt7993 Firmware
    Vendor
    Mediatek
    Product
    Software Development Kit
    Vendor
    Openwrt
    Product
    Openwrt

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2023-20819 (CVSS 9.8) — In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead t…
    CVE-2022-21775 (CVSS 6.7) — In sched driver, there is a possible use after free due to improper locking. This could lead to local escalati…
    CVE-2022-20083 (CVSS 9.8) — In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to r…
    CVE-2022-21744 (CVSS 9.8) — In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remo…
    CVE-2022-21764 (CVSS 5.5) — In telecom service, there is a possible information disclosure due to a missing permission check. This could l…
    CVE-2022-21763 (CVSS 5.5) — In telecom service, there is a possible information disclosure due to a missing permission check. This could l…
    CVE-2022-21758 (CVSS 6.7) — In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of pri…
    CVE-2022-21755 (CVSS 4.4) — In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to lo…
    CVE-2022-21749 (CVSS 5.5) — In telephony, there is a possible information disclosure due to a missing permission check. This could lead to…
    CVE-2022-20093 (CVSS 7.8) — In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. Thi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High