CVE-2025-20717
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check, which could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not needed.
Risk Assessment
Local privilege escalation could allow an attacker to gain full control over the device, potentially leading to system and data integrity compromise.
Recommendation
Apply patch WCNCR00419946 or update the driver to a version that includes the fix.
Other vulnerabilities in WLAN AP driver
See all- CVE-2026-20465High
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20452High
In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-3582.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS