CVE-2025-20740
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
Risk Assessment
A local attacker with user privileges could disclose sensitive information, potentially compromising data confidentiality.
Recommendation
Apply patch ID WCNCR00435337 (Issue ID: MSV-4036) provided by the vendor.
Other vulnerabilities in wlan STA driver
See all- CVE-2026-20456Medium
Vulnerability in the WLAN STA driver on Android (MediaTek chipset) allows a system crash due to a missing bounds check, leading to local denial of service.
- CVE-2025-20728High
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
Original NVD description (English source)
In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS