Out of Bounds Write in WLAN AP Driver from MediaTek

CVE-2025-20681

What is CVE-2025-20681?

The WLAN AP driver from MediaTek is susceptible to an out of bounds write vulnerability due to an incorrect bounds check. This flaw could potentially enable a local user to escalate their privileges, as user execution privileges are required for exploitation. While user interaction is not necessary for the attack to succeed, it poses a significant risk to system integrity. Affected users are encouraged to apply the security patch identified by Patch ID WCNCR00416936 to mitigate this vulnerability.

References