Vulnerability Description
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediatek | Software Development Kit | <= 7.6.7.2 |
| Openwrt | Openwrt | 19.07.0 |
| Mediatek | Mt6890 | - |
| Mediatek | Mt7615 | - |
| Mediatek | Mt7622 | - |
| Mediatek | Mt7663 | - |
| Mediatek | Mt7915 | - |
| Mediatek | Mt7916 | - |
| Mediatek | Mt7981 | - |
| Mediatek | Mt7986 | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-20729?
CVE-2025-20729 is a vulnerability with a CVSS score of 4.2 (MEDIUM). In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privi...
How severe is CVE-2025-20729?
CVE-2025-20729 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-20729?
Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Software Development Kit, Openwrt Openwrt, Mediatek Mt6890, Mediatek Mt7615, Mediatek Mt7622.