Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20729
4.2MEDIUM
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 4 November 2025
What is CVE-2025-20729?
A vulnerability exists within the MediaTek WLAN AP driver where an improper bounds check can lead to an out of bounds write condition. This flaw allows a malicious actor who has already achieved system privilege to escalate their access without the need for user interaction. It is crucial for users to apply the relevant patches to mitigate potential threats.
Affected Version(s)
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02