Out of Bounds Write Vulnerability in MediaTek WLAN Access Point Driver

CVE-2025-20731

What is CVE-2025-20731?

The MediaTek WLAN Access Point driver contains a vulnerability that allows for an out of bounds write due to an improper bounds check. This issue could potentially enable a malicious actor to escalate privileges locally if they have previously acquired system privileges, particularly when the OceReducedNeighborReport feature is disabled. Notably, exploitation of this vulnerability does not require user interaction, making it a significant risk for affected systems. Users are advised to update to the patched version identified by Patch ID WCNCR00441511 to mitigate this risk. More information can be found in the MediaTek product security bulletin.

References