CVE-2026-20465

HighCVSS 8.1

Published: 03/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 03/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.

Risk Assessment

An attacker within wireless range could gain higher privileges on the device, potentially leading to system takeover.

Recommendation

Apply patch WCNCR00489200 to fix the vulnerability.

Other vulnerabilities in WLAN AP driver

CVE-2026-20452High
In the WLAN AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation.

Original NVD description (English source)

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-7834.