Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20718

7.8HIGH

Key Information:

Vendor

MediaTek
Status
Mt6890, Mt7615, Mt7622, Mt7663, Mt7915, Mt7916, Mt7981, Mt7986
Vendor
CVE Published:
14 October 2025

What is CVE-2025-20718?

The WLAN AP Driver from MediaTek exhibits an out of bounds write vulnerability caused by an inadequate bounds check. This type of vulnerability could potentially allow local users to escalate their privileges, albeit requiring user execution privileges to be exploited. Notably, no user interaction is needed for the actual exploitation to take place, highlighting a significant security concern. MediaTek has acknowledged the issue and provided a patch identified as WCNCR00419945 to mitigate the risk.

Affected Version(s)

MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02

References

https://corp.mediatek.com/product-security-bulletin/Octob...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.