Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20738
6.7MEDIUM
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 4 November 2025
What is CVE-2025-20738?
The MediaTek WLAN AP driver is susceptible to an out of bounds write vulnerability caused by insufficient bounds checking. This flaw can permit a local attacker, who has already gained system privileges, to escalate their privileges further without requiring user interaction. Addressing this vulnerability is critical to maintaining the integrity and security of systems utilizing affected versions of the driver.
Affected Version(s)
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02