Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver
CVE-2025-20739
6.7MEDIUM
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 4 November 2025
What is CVE-2025-20739?
A vulnerability exists in the MediaTek WLAN Access Point driver due to an improper bounds check within the code. This issue can allow a malicious actor to perform an out of bounds write, which can potentially lead to a local escalation of privilege, assuming the attacker has already gained system-level access. Importantly, no user interaction is required for this vulnerability to be exploited. This situation underscores the need for immediate attention and patching to ensure device security from potential threats.
Affected Version(s)
MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 SDK release 7.6.7.2 and before / openWRT 19.07, 21.02