CVE-2025-20742CWE-122CWE-787

CVE-2025-20742

High · published November 4, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

⚡ An incorrect bounds check in the wlan AP driver opens the door to privilege escalation without breaking a sweat! This means an attacker nearby can take advantage without any user interaction required. 🔥 Think of it like a restaurant where the staff miscalculates the number of seats available. With one wrongly placed table, someone might sneak in and claim a prime spot without anyone noticing — that's the kind of access this bug can grant! An attacker within range could exploit this flaw to gain elevated privileges on the system, allowing them to execute unauthorized commands or malicious actions. Imagine a malicious diner suddenly having access to the kitchen; they could create chaos without anyone realizing what's happening!

Put simply

Think of it like a restaurant where the staff miscalculates the number of seats available. With one wrongly placed table, someone might sneak in and claim a prime spot without anyone noticing — that's the kind of access this bug can grant! This vulnerability stems from an out of bounds write in the wlan AP driver, resulting from insufficient checks on data inputs. This oversight creates an opportunity for escalation of privileges, enabling unauthorized access to system resources.

What to do

An attacker within range could exploit this flaw to gain elevated privileges on the system, allowing them to execute unauthorized commands or malicious actions. Imagine a malicious diner suddenly having access to the kitchen; they could create chaos without anyone realizing what's happening! To safeguard your system, patch to the latest version using Patch ID: WCNCR00432680. Review all configurations related to the wlan AP driver and ensure access controls are properly implemented. Audit your network environment to monitor for any suspicious activity! You've got this! Implement these fixes and fortify your defenses like a security pro! 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.2th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-04T12:15Z
Affected products (3)
ProductVersionsFixed in
mediatek/software_development_kit≤ 7.6.7.2—
openwrt/openwrtall versions—
openwrt/openwrtall versions—
References (1)
EPSS history
Timeline
  • 04 NOV 06:19Z
    In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5