Out of Bounds Read Vulnerability in MediaTek WLAN Driver

CVE-2025-20740

What is CVE-2025-20740?

A vulnerability exists in the WLAN STA driver that allows for a potential out of bounds read due to a race condition. This situation can lead to a local information disclosure risk, requiring user execution privileges for exploitation. Notably, user interaction is not necessary to exploit this vulnerability. To address this issue, a patch has been issued under ID WCNCR00435337, associated with Issue ID MSV-4036. For more comprehensive details, refer to the MediaTek product security bulletin.

References