Out of Bounds Write Vulnerability in Mediatek WLAN AP Driver

CVE-2025-20712

What is CVE-2025-20712?

A vulnerability has been identified in the Mediatek WLAN AP driver where an incorrect bounds check leads to a possible out of bounds write. This flaw may enable a remote party to escalate privileges without requiring additional execution permissions or user interaction, potentially exposing systems to unauthorized access. A patch has been issued to address this issue (Patch ID: WCNCR00422323; Issue ID: MSV-3810). For further details, please refer to the Mediatek product security bulletin.

References