CVE-2025-20748
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local privilege escalation if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.
Risk Assessment
The vulnerability allows escalation to System privileges on devices with the affected driver, potentially enabling full system control. However, it requires the attacker to already have System privileges.
Recommendation
Update the wlan AP driver to a version containing patch WCNCR00432679. Restrict access to devices with this driver and monitor for unauthorized access attempts.
Other vulnerabilities in wlan AP driver
See all- CVE-2026-20465High
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20452High
In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20742High
In the wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed and no user interaction required.
- CVE-2025-20741Medium
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.
- CVE-2025-20739Medium
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local privilege escalation if a malicious actor has already obtained System privileges. No user interaction is required for exploitation.
- CVE-2025-20738Medium
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local privilege escalation if a malicious actor has already obtained System privileges. No user interaction is required for exploitation.
- CVE-2025-20737High
In the wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20736Medium
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.
- CVE-2025-20735High
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051.
- CVE-2025-20734Medium
In the wlan AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privilege. User interaction is not needed for exploitation.
Original NVD description (English source)
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

