Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20717
7.8HIGH
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-20717?
A vulnerability exists within the WLAN AP driver that allows for an out of bounds write due to insufficient bounds checking. This issue could potentially enable local escalation of privileges for an attacker who has already acquired system-level access. Notably, the exploitation of this vulnerability does not require any user interaction, making it particularly concerning for system administrators and users relying on the security of MediaTek's solutions. It is critical to apply patches promptly to mitigate this risk.
Affected Version(s)
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02 (MT6890)