CVE-2025-20712
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
An attacker in close proximity could gain elevated privileges on the system, potentially leading to full compromise of the device or network.
Recommendation
Apply patch WCNCR00422323 (Issue ID: MSV-3810) provided by the vendor. Update the WLAN AP driver to the latest version.
Other vulnerabilities in WLAN AP driver
See all- CVE-2026-20465High
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20452High
In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20724Medium
In the WLAN AP driver, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20720High
In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.
- CVE-2025-20719High
In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.
- CVE-2025-20718High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.
- CVE-2025-20717High
In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check, which could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not needed.
- CVE-2025-20716High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
- CVE-2025-20715High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
- CVE-2025-20714High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
Original NVD description (English source)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

