CVE-2026-20452

HighCVSS 8.0

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

Risk includes remote code execution within the local network, potentially leading to device compromise and further attacks.

Recommendation

Apply patch WCNCR00480138 and restrict Wi-Fi network access to trusted devices only.

Other vulnerabilities in WLAN AP driver

CVE-2026-20465High
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Original NVD description (English source)

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.