7 matches found
CVE-2025-20724
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475...
CVE-2025-20717
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-358...
CVE-2025-20685
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409...
CVE-2025-20663
A vulnerability exists in the MediaTek wlan AP driver software due to an uncaught exception in error handling. This flaw allows a remote attacker to perform proximal/adjacent information disclosure , potentially exposing sensitive system data without requiring additional execution privileges or u...
CVE-2025-20631
A security vulnerability exists in the MediaTek MT7615/MT7622/MT7663/MT7915/MT7916/MT7981/MT7986 WLAN AP Driver due to an incorrect bounds check . This flaw leads to an out-of-bounds write , which can be exploited for local escalation of privilege without requiring additional execution privileges...
CVE-2025-20633
In MediaTek WLAN AP driver, CVE-2025-20633 describes a bound-check error causing an out-of-bounds write that could enable remote code execution without user interaction. Impact is high (C/H/I/A = 8.8 CVSS). The issue affects MediaTek MT7603/MT7615/MT7622/MT7915/related WLAN AP driver code paths a...
CVE-2025-20633
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491...