CVE-2025-20720
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.
Risk Assessment
An adjacent attacker could gain elevated privileges, potentially leading to device compromise.
Recommendation
Install patch WCNCR00418954 (Issue MSV-3569) from the vendor.
Other vulnerabilities in wlan AP driver
See all- CVE-2026-20465High
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20452High
In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20724Medium
In the WLAN AP driver, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20719High
In wlan AP driver, an out-of-bounds write due to incorrect bounds check could lead to remote (proximal/adjacent) privilege escalation without user interaction.
- CVE-2025-20718High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.
- CVE-2025-20717High
In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check, which could lead to local escalation of privilege if an attacker already has System privilege. User interaction is not needed.
- CVE-2025-20716High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
- CVE-2025-20715High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
- CVE-2025-20714High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
- CVE-2025-20713High
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. No user interaction is needed for exploitation.
Original NVD description (English source)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

