Out of Bounds Write Vulnerability in MediaTek WLAN AP Driver

CVE-2025-20748

What is CVE-2025-20748?

The vulnerability in the WLAN AP driver of MediaTek products exposes users to the risk of local privilege escalation due to a flawed bounds check. When exploited, this flaw allows an attacker with system-level access to write to memory locations outside the intended boundaries, potentially compromising system integrity without requiring user interaction. A fix has been initiated, and users are advised to apply the patch to mitigate risks. Continuous monitoring and updates are crucial to maintaining security.

References