CVE-2025-20733CWE-122CWE-787

CVE-2025-20733

High · published November 4, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

⚡ An out of bounds write lurking in the wlan AP driver could give an attacker a free pass to escalate privileges—no user interaction needed! 😱 Think of it like a restaurant that accidentally allows a waiter to access the kitchen without proper checks—once inside, they can cook up anything they want! 🍳 If exploited, this vulnerability could allow an attacker with user execution privileges to gain elevated access, potentially compromising sensitive information or system integrity. Imagine someone sneaking into the chef's area and making unauthorized changes to recipes—devastating, right?

Put simply

Think of it like a restaurant that accidentally allows a waiter to access the kitchen without proper checks—once inside, they can cook up anything they want! 🍳 This issue arises from an improper bounds check in the wlan AP driver, leading to potential out of bounds write vulnerabilities. This weakness allows an attacker with basic user privileges to escalate their access without needing user interaction.

What to do

If exploited, this vulnerability could allow an attacker with user execution privileges to gain elevated access, potentially compromising sensitive information or system integrity. Imagine someone sneaking into the chef's area and making unauthorized changes to recipes—devastating, right? To secure your systems, apply the patch (ID: WCNCR00441509) as soon as possible. Regularly audit your drivers and maintain a close watch on your privilege escalations. Don't forget to keep user access under control! You can tackle this! Follow the steps to protect your system and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-04T12:15Z
Affected products (3)
ProductVersionsFixed in
mediatek/software_development_kit≤ 7.6.7.2—
openwrt/openwrtall versions—
openwrt/openwrtall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 06:19Z
    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5