CVE-2025-20741

Published Nov 4, 2025

Last updated 7 months ago

MediaTek, Inc

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-20741 describes a vulnerability found in the WLAN AP driver, attributed to MediaTek, Inc. This flaw is characterized as a possible out-of-bounds write, stemming from an incorrect bounds check within the driver's code. Exploitation of this vulnerability could potentially lead to a local escalation of privilege. This scenario would occur if a malicious actor has already obtained System privilege on the affected system. User interaction is not required for the exploitation of this issue.

Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958.
Source: security@mediatek.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 6.7
Impact score: 5.9
Exploitability score: 0.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

security@mediatek.com: CWE-122

Hype score: Not currently trending

References