CVE-2025-20728CWE-122CWE-787

CVE-2025-20728

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

⚡ There’s a sneaky out-of-bounds write in the wlan STA driver that could let a local attacker escalate privileges without needing any user interaction! 🔥 Think of this vulnerability like a construction worker who accidentally builds a second story without proper supports—if the structure isn’t right, it could all come crashing down! An attacker with user execution privileges could exploit this flaw to gain higher access levels and potentially take over critical system functions. This is no minor inconvenience; it could lead to a complete compromise of the system. Yikes!

Put simply

Think of this vulnerability like a construction worker who accidentally builds a second story without proper supports—if the structure isn’t right, it could all come crashing down! This vulnerability arises from an incorrect bounds check in the wlan STA driver, allowing an out-of-bounds write that could be exploited for privilege escalation by local users.

What to do

An attacker with user execution privileges could exploit this flaw to gain higher access levels and potentially take over critical system functions. This is no minor inconvenience; it could lead to a complete compromise of the system. Yikes! To remediate this issue, patch your system with ID WCNCR00447115 as soon as possible. Ensure that you check for updates regularly and apply any security patches to address vulnerabilities promptly. You've got this! With a quick patch, you’ll have your system secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-04T12:15Z
Affected products (1)
ProductVersionsFixed in
mediatek/software_development_kitall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 06:19Z
    In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5