Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver

CVE-2025-20715

What is CVE-2025-20715?

The MediaTek WLAN AP driver contains a vulnerability that allows for an out of bounds write due to an inadequate bounds check. This issue presents a risk of local privilege escalation, meaning that a malicious user who has already gained system privileges could exploit this vulnerability to potentially gain higher access within the system. Importantly, the exploitation of this vulnerability does not require any user interaction, making it a critical concern for systems utilizing affected versions of the driver. A patch has been released to address this issue.

References