CVE-2025-20734

The CVE-2025-20734 entry describes a local privilege-escalation flaw in the wlan AP driver (MediaTek chipset family) caused by an out-of-bounds write due to an incorrect bounds check. Impact is local (no user interaction required) with Privileges Required: Low and an overall “Low” confidentiality...

CVE-2025-20734

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-411...

CVE-2025-20732

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege when OceReducedNeighborReport is disabled. User interaction is not needed for exploitation...

CVE-2025-20729

The CVE-2025-20729 entry describes an out-of-bounds write in the wlan AP driver caused by an incorrect bounds check. This can enable local privilege escalation for an attacker who already has System privileges, with no user interaction required. Public details consistently cite patch WCNCR0044151...

CVE-2025-20729

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-415...

CVE-2025-20742

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID:...

CVE-2025-20742

The ZyXEL WLAN AP driver is vulnerable to an out-of-bounds write caused by an incorrect bounds check. This flaw allows for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. Affected versions are not specified, but the vulnera...

CVE-2025-20740

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036...

CVE-2025-20740

A race condition in the wlan STA driver (associated with MediaTek Chipsets and Qualcomm drivers) allows for an out-of-bounds read . This vulnerability could lead to local information disclosure . Exploitation requires User execution privileges , but no user interaction is required. Remediation de...

CVE-2025-20737

A security vulnerability exists in the wlan AP driver (specifically associated with MediaTek Chipsets and Aruba WLAN AP Driver ) due to an incorrect bounds check leading to an out-of-bounds write . An attacker with local user execution privileges can exploit this flaw to achieve local escalation ...

CVE-2025-20737

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040...

CVE-2025-20735

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051...

CVE-2025-20735

A security vulnerability exists in the wlan AP driver (specifically associated with MediaTek Chipsets and identified in Cisco WLAN AP Driver documentation) due to an incorrect bounds check . This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege . Ex...

CVE-2025-20733

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138...

CVE-2025-20733

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138...

CVE-2025-20728

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276...

CVE-2025-20728

A security vulnerability exists in the wlan STA driver (associated with Qualcomm or MediaTek Chipsets ) due to an incorrect bounds check that results in an out-of-bounds write (also described as a Heap-based Buffer Overflow ). This flaw could allow a local attacker to achieve local escalation of ...

CVE-2025-20735: Heap-based Buffer Overflow

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051...

CVE-2025-20742: Heap-based Buffer Overflow

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID:...

CVE-2025-20748: Out-of-bounds Write

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-395...