CVE-2025-20631

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187.

CVE-2024-20017

A vulnerability exists in the wlan service of MediaTek Wi-Fi chipsets (specifically affecting the MT7622/MT7915 SDK and RTxxxx SoftAP driver bundle ) due to improper input validation. This flaw leads to an out-of-bounds write (buffer overflow) within the wappd network daemon , potentially allowin...

CVE-2024-20148

In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID:...

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue...

CVE-2024-20103

In CVE-2024-20103, MediaTek WLAN firmware contains an out-of-bounds write due to improper input validation, enabling remote code execution with no privileges or user interaction required. The vulnerability affects WLAN-related firmware (MediaTek) and is tracked under Patch ID ALPS09001358 and MSV...

CVE-2025-20654

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875.

CVE-2024-20100

CVE-2024-20100 concerns a possible out-of-bounds write in the MediaTek wlan driver, caused by improper input validation. The issue could allow remote code execution with no privileges or user interaction required. Connected sources consistently identify the affected component as the MediaTek WLAN...

CVE-2026-20408

A heap buffer overflow in the wlan component of MediaTek Chipsets allows for an out-of-bounds write. This vulnerability can lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While specific affected versions are not de...

CVE-2024-20018

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019.

CVE-2024-20101

CVE-2024-20101 affects the MediaTek WLAN stack; the vulnerability arises from improper input validation in the WLAN driver, causing an out-of-bounds write that could enable remote code execution with no privileges and no user interaction required. Public references in NVD/Red Hat and related bull...

CVE-2025-20633

In MediaTek WLAN AP driver, CVE-2025-20633 describes a bound-check error causing an out-of-bounds write that could enable remote code execution without user interaction. Impact is high (C/H/I/A = 8.8 CVSS). The issue affects MediaTek MT7603/MT7615/MT7622/MT7915/related WLAN AP driver code paths a...

CVE-2025-20632

CVE-2025-20632 concerns the WLAN AP driver with an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with no user interaction. A patch (Patch ID: WCNCR00397139; MSV-2188) is referenced. Connected sources consistently identify the WLAN AP driver as affect...

CVE-2025-20646

In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803.

CVE-2025-20637

CVE-2025-20637 affects MediaTek MediaTek-based network hardware (network HW module). The vulnerability is caused by an uncaught exception in the network stack, which can cause a system hang and enable remote denial of service without requiring privileges or user interaction. The available documen...

CVE-2024-20147

A security vulnerability exists in the Bluetooth FW of MediaTek chipsets due to improper exception handling , which can lead to a reachable assertion . This flaw allows an attacker to cause a remote denial of service without requiring additional execution privileges or user interaction. Remediati...

CVE-2025-20694

A vulnerability exists in the Bluetooth firmware microprogramming software of MediaTek chips. The flaw is caused by an uncaught exception (and specifically a violation of the buffer’s initial boundary ), which can lead to a system crash . This condition allows a remote attacker to trigger a denia...

CVE-2025-20649

In Bluetooth Stack SW, a missing permission check enables information disclosure from adjacent/remote sources without requiring user interaction. Exposed component, root cause and impact are described in CVE-2025-20649 with a patch: WCNCR00396437 (Issue MSV-2184). The CVSS data indicates an adjac...

CVE-2025-20663

A vulnerability exists in the Wlan AP Driver software of MediaTek chipsets. The flaw is caused by an uncaught exception in the driver's exception handling, which could lead to remote (proximal/adjacent) information disclosure . This vulnerability does not require additional execution privileges o...

CVE-2025-20674

The CVE-2025-20674 entry concerns MediaTek wlan AP driver vulnerabilities in MediaTek chipsets, where a missing permission check allows injection of arbitrary packets. This can lead to remote escalation of privilege without extra execution privileges or user interaction. The issue is documented w...

CVE-2024-20073

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00367704; Issue ID: MSV-1411.

CVE-2025-20664

A vulnerability in the wlan AP driver of MediaTek chipsets, specifically within microprogramming-based components, allows for remote (proximal/adjacent) information disclosure . The root cause is an uncaught exception in the software driver's error handling. This vulnerability can be exploited wi...

CVE-2024-20138

CVE-2024-20138 concerns the WLAN driver in affected MediaTek MediaTek-based chipsets, where improper input validation can cause an out-of-bounds read. This leads to remote information disclosure without additional privileges and without user interaction. The issue is documented across multiple so...

CVE-2024-20153

A security vulnerability exists in the wlan STA module of MediaTek Chipsets . An attacker can trick a client into connecting to an access point (AP) using a spoofed SSID . This flaw can lead to remote information disclosure without requiring additional execution privileges or user interaction. Re...

CVE-2024-20152

In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue...

CVE-2024-20072

A vulnerability exists in the wlan driver due to an out-of-bounds write caused by improper input validation. This flaw could allow for local escalation of privilege with System execution privileges. Notably, no user interaction is required for exploitation. Remediation information includes Patch ...

CVE-2025-20690

The Wlan AP Driver in MediaTek microprogramming chips is vulnerable to an out-of-bounds read caused by an incorrect bounds check. This security flaw can lead to local information disclosure , allowing an attacker to access protected information. Exploitation requires User execution privileges , a...

CVE-2025-20733

CVE-2025-20733 affects the WLAN AP driver (Aruba MediaTek-based). The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Patch WCNCR00441509 (MSV-4138) mitigates this; vendor advisories an...

CVE-2024-20071

CVE-2024-20071 affects the WLAN driver with an out-of-bounds read caused by improper input validation. Impact per sources is local information disclosure requiring System execution privileges, with no user interaction. Exploitation details are not provided in the documents; remediation mentioned ...

CVE-2024-20139

A security vulnerability exists in MediaTek Chipsets within the Bluetooth firmware due to the improper handling of exceptional conditions. This flaw can lead to a firmware assertion , resulting in a local denial of service (DoS). Exploitation does not require additional execution privileges or us...

CVE-2023-32831

CVE-2023-32831 concerns the wlan driver where use of insufficiently random values can enable a local information disclosure without privileges or user interaction. The vulnerability is described across multiple sources as a PIN-crack via weak randomness in the WLAN driver. The CVSS v3.1 metrics (...

CVE-2025-20693

The CVE-2025-20693 issue affects the wlan STA driver, with an out-of-bounds read caused by an incorrect bounds check. This vulnerability could allow remote information disclosure from proximal access without extra privileges or user interaction. The impact is described as high confidentiality ris...

CVE-2025-20720

CVE-2025-20720 relates to the wlan AP driver, where an incorrect bounds check can cause an out-of-bounds write. The description indicates this could enable remote (proximal/adjacent) privilege escalation without additional execution privileges and without user interaction. Connected sources corro...

CVE-2025-20686

CVE-2025-20686 affects the WLAN Access Point driver. The issue is an out-of-bounds write caused by an incorrect bounds check, enabling remote code execution with no privileges and no user interaction. A patch is available: WCNCR00415570 (MSV-3404). This is the key remediation, with CVSSv3.1 metri...

CVE-2025-20682

A security vulnerability exists in the wlan AP driver within MediaTek Chipsets due to an incorrect bounds check that leads to an out-of-bounds write . This flaw allows for local escalation of privilege , requiring only User execution privileges for exploitation without the need for user interacti...

CVE-2025-20691

CVE-2025-20691 affects the WLAN Access Point (AP) driver in MediaTek chipsets. The root cause is an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure. Privilege requirements are LOW with LOCAL attack vector and no user interaction required for expl...

CVE-2025-20709

The CVE-2025-20709 entry covers a flaw in the wlan AP driver: an out-of-bounds write caused by an incorrect bounds check. Patches are identified (Patch ID: WCNCR00415809; Issue ID: MSV-3405). Reported across multiple feeds (Red Hat, ENISA EUVD, CIRCL, NVD, CVE List, PT Security) with consistent d...

CVE-2025-20710

CVE-2025-20710 affects the wlan AP driver in MediaTek chipsets, with an out-of-bounds write caused by an integer overflow. This could enable remote (proximal/adjacent) privilege escalation without user interaction. A patch is referenced (Patch ID: WCNCR00418785; Issue ID: MSV-3515). The public do...

CVE-2025-20683

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for local escalation of privilege requiring only user execution privileges, with no user interaction required for exploitation. Rem...

CVE-2025-20681

The Wlan AP Driver software from MediaTek chipsets contains a vulnerability where an incorrect bounds check can lead to an out-of-bounds write in memory. This flaw allows a local attacker to achieve local escalation of privilege without requiring user interaction. Exploitation requires User execu...

CVE-2025-20692

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.

CVE-2025-20711

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can lead to an out-of-bounds write . This flaw may allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction...

CVE-2025-20689

A vulnerability exists in the Wlan AP Driver software used in MediaTek microprogramming chips. The issue stems from an incorrect bounds check that leads to an out-of-bounds read in memory. This vulnerability could allow an attacker with User execution privileges to disclose sensitive local inform...

CVE-2025-20695

A vulnerability exists in the Bluetooth firmware microprogramming software of MediaTek chipsets. The root cause is an uncaught exception or a violation of the buffer’s initial boundary , which can be exploited to cause a system crash leading to a remote denial of service (DoS). Exploitation does ...

CVE-2025-20685

A vulnerability exists in the wlan AP driver of MediaTek microprogramming chips due to an incorrect bounds check. This flaw allows for an out-of-bounds write in memory, which could enable a remote attacker (proximal/adjacent) to achieve arbitrary code execution without requiring additional privil...

CVE-2025-20713

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check . This flaw can lead to an out-of-bounds write , potentially allowing a malicious actor with existing System privileges to achieve local escalation of privilege . No user interaction is req...

CVE-2025-20717

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can result in an out-of-bounds write . This flaw could allow a malicious actor who has already obtained System privileges to achieve local escalation of privilege . No user interact...

CVE-2025-20688

The CVE-2025-20688 issue affects the wlan AP driver and is caused by an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure with User execution privileges needed (no user interaction required). The CVE records indicate a patch is available: WCNCR0041...

CVE-2025-20729

The CVE-2025-20729 entry describes an out-of-bounds write in the wlan AP driver caused by an incorrect bounds check. This can enable local privilege escalation for an attacker who already has System privileges, with no user interaction required. Public details consistently cite patch WCNCR0044151...

CVE-2026-20419

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR0...

CVE-2026-20430

A vulnerability in the wlan AP firmware of MediaTek Chipsets and Linksys Wlan AP (affected versions not specified) allows for an out-of-bounds write due to an incorrect bounds check . This flaw could lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution...