Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20717

Currently unrated

What is CVE-2025-20717?

A vulnerability exists within the WLAN AP driver that allows for an out of bounds write due to insufficient bounds checking. This issue could potentially enable local escalation of privileges for an attacker who has already acquired system-level access. Notably, the exploitation of this vulnerability does not require any user interaction, making it particularly concerning for system administrators and users relying on the security of MediaTek's solutions. It is critical to apply patches promptly to mitigate this risk.

Affected Version(s)

MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02 (MT6890)

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20717 : Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver