CVE-2025-20728
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
Risk Assessment
A local attacker could exploit the flaw to escalate privileges, potentially leading to system compromise.
Recommendation
Apply patch WCNCR00447115 provided by the vendor.
Other vulnerabilities in wlan STA driver
See all- CVE-2026-20456Medium
Vulnerability in the WLAN STA driver on Android (MediaTek chipset) allows a system crash due to a missing bounds check, leading to local denial of service.
- CVE-2025-20740Medium
In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
Original NVD description (English source)
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS