Out of Bounds Write Vulnerability in Mediatek WLAN AP Driver
CVE-2025-20720
Currently unrated
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-20720?
The wlan AP driver from Mediatek is susceptible to an out of bounds write vulnerability due to improper bounds checking. This flaw allows for potential escalation of privilege, enabling unauthorized users to gain elevated access in a proximate environment without needing any additional execution privileges or user interaction. Affected users should apply the necessary patch identified as WCNCR00418954 to mitigate the risk associated with this vulnerability.
Affected Version(s)
MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / OpenWrt 19.07, 21.02 (MT6890)