Out of Bounds Write Vulnerability in MediaTek WLAN Driver

CVE-2025-20728

What is CVE-2025-20728?

A vulnerability has been identified within the MediaTek WLAN STA driver that allows for an out of bounds write due to inadequate bounds checking. This defect permits local escalation of privileges, enabling potential attackers to gain unauthorized access to sensitive system resources. User action is not required to exploit this flaw, presenting a considerable risk. A patch has been made available under the ID WCNCR00447115 to address this issue, urging all users to update their systems promptly.

References