Out of Bounds Write Vulnerability in MediaTek Wlan AP Driver
CVE-2025-20733
7.8HIGH
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 4 November 2025
What is CVE-2025-20733?
A vulnerability exists in the MediaTek WLAN AP driver that allows for out of bounds writing due to improper bounds checking. This flaw could enable an attacker to escalate user privileges locally, without needing user interaction to exploit. Users are advised to apply the patch WCNCR00441509 to mitigate the risk associated with this vulnerability.
Affected Version(s)
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02