CVE-2025-20631

A security vulnerability exists in the MediaTek MT7615/MT7622/MT7663/MT7915/MT7916/MT7981/MT7986 WLAN AP Driver due to an incorrect bounds check . This flaw leads to an out-of-bounds write , which can be exploited for local escalation of privilege without requiring additional execution privileges...

CVE-2024-20017

A critical out-of-bounds write vulnerability exists in the wlan service (specifically the wappd network daemon) of MediaTek Wi-Fi chipsets and SoftAP driver bundles. The root cause is improper input validation where a length value taken directly from attacker-controlled packet data is placed into...

CVE-2024-20148

A security vulnerability exists in MediaTek chipsets affecting the wlan STA FW module. The issue is caused by improper input validation , which can lead to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote (proximal/adjacent) code execution without requiring add...

CVE-2025-20633

In MediaTek WLAN AP driver, CVE-2025-20633 describes a bound-check error causing an out-of-bounds write that could enable remote code execution without user interaction. Impact is high (C/H/I/A = 8.8 CVSS). The issue affects MediaTek MT7603/MT7615/MT7622/MT7915/related WLAN AP driver code paths a...

CVE-2026-20408

A heap buffer overflow in the wlan component of MediaTek Chipsets allows for an out-of-bounds write . This vulnerability can lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While some documents specify Patch ID: WCN...

CVE-2024-20146

The MediaTek wlan STA driver is vulnerable to an out-of-bounds write due to improper input validation. This flaw could allow a remote attacker to execute arbitrary code with no additional execution privileges required and no user interaction. The vulnerability is particularly relevant to Android ...

CVE-2024-20103

A security vulnerability exists in MediaTek chips, specifically within the wlan firmware component. The issue is caused by improper input validation of wlan frame inputs, which can lead to an out-of-bounds write . This flaw could allow an attacker to achieve remote code execution (RCE) without re...

CVE-2025-20654

A vulnerability exists in the wlan service of MediaTek Chipsets due to an incorrect bounds check that allows for an out-of-bounds write . This flaw could enable an attacker to achieve remote code execution without requiring additional privileges or user interaction. Impacted products include Medi...

CVE-2024-20018

The wlan driver developed by MediaTek contains an out-of-bounds write vulnerability caused by improper input validation. This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction. While some reports mention remote privilege escalation...

CVE-2024-20100

A high-severity vulnerability exists in MediaTek chips within the wlan driver component. The root cause is improper input validation , which can lead to an out-of-bounds write . Exploitation of this flaw could result in remote code execution (RCE) without requiring additional execution privileges...

CVE-2024-20101

A high-severity vulnerability exists in the wlan driver of MediaTek components due to improper input validation, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution (RCE) without requiring additional execution privileges or user interacti...

CVE-2025-20632

A vulnerability exists in the wlan AP driver (associated with MediaTek Chipsets ) due to an incorrect bounds check, which can lead to an out-of-bounds write . This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is ide...

CVE-2025-20646

A security vulnerability exists in wlan AP FW within MediaTek Chipsets due to improper input validation , which can lead to an out-of-bounds write . This flaw could allow an attacker to achieve remote escalation of privilege without requiring additional execution privileges or user interaction. R...

CVE-2025-20637

CVE-2025-20637 affects MediaTek MediaTek-based network hardware (network HW module). The vulnerability is caused by an uncaught exception in the network stack, which can cause a system hang and enable remote denial of service without requiring privileges or user interaction. The available documen...

CVE-2024-20147

A security vulnerability exists in the Bluetooth FW microprogramming software of MediaTek chipsets. The flaw originates from improper exception handling , which can lead to a reachable assertion . Exploiting this vulnerability allows a remote attacker to cause a denial of service (DoS) without re...

CVE-2025-20694

The Bluetooth driver's firmware microprogramming software on MediaTek chips is vulnerable to a buffer underwrite (violation of the buffer's initial boundary) caused by an uncaught exception . This flaw allows a remote attacker to cause a system crash , resulting in a denial of service without req...

CVE-2025-20663

A vulnerability exists in the MediaTek wlan AP driver software due to an uncaught exception in error handling. This flaw allows a remote attacker to perform proximal/adjacent information disclosure , potentially exposing sensitive system data without requiring additional execution privileges or u...

CVE-2025-20649

A vulnerability exists in the Bluetooth Stack SW of MediaTek Chipsets due to a missing permission check . This flaw allows for remote (proximal/adjacent) information disclosure without requiring additional execution privileges or user interaction. The issue is identified by Patch ID: WCNCR0093643...

CVE-2025-20674

A security vulnerability exists in the wlan AP driver software developed by MediaTek . The issue stems from a missing permission check (authentication mechanism deficiency), which allows an attacker to inject arbitrary packets . Successful exploitation can lead to remote escalation of privilege w...

CVE-2024-20073

The wlan service contains a possible out of bounds write vulnerability caused by improper input validation . This flaw could allow for local escalation of privilege , although System execution privileges are required for exploitation. No user interaction is necessary for exploitation. Remediation...

CVE-2024-20153

A security vulnerability exists in the wlan STA module of MediaTek Chipsets . An attacker can trick a client into connecting to an Access Point (AP) using a spoofed SSID , potentially leading to remote information disclosure . This attack requires no additional execution privileges and no user in...

CVE-2024-20138

A security vulnerability exists in MediaTek Chipsets due to improper input validation within the wlan driver . This flaw allows for a possible out-of-bounds read , which could lead to remote information disclosure without requiring additional execution privileges or user interaction. While the sp...

CVE-2025-20664

The Wlan AP Driver software driver from MediaTek (specifically identified in Mt7915 context) contains an uncaught exception error in its exception handling. This vulnerability allows a remote attacker to perform information disclosure of sensitive system-protected data without requiring additiona...

CVE-2025-20690

A vulnerability exists in the wlan AP driver of MediaTek microprogramming chips due to an incorrect bounds check resulting in an out-of-bounds read . This flaw could allow an attacker with User execution privileges to disclose sensitive information or local information . No user interaction is re...

CVE-2024-20072

A vulnerability exists in the wlan driver where improper input validation can lead to a possible out-of-bounds write . This flaw could result in local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required to trigger the vulnerability. Re...

CVE-2024-20152

A security vulnerability exists in the wlan STA driver of MediaTek Chipsets due to improper exception handling, which allows for a reachable assertion . A malicious actor who has already obtained System privilege can exploit this issue to cause a local denial of service . No user interaction is r...

CVE-2023-32831

CVE-2023-32831 concerns the wlan driver where use of insufficiently random values can enable a local information disclosure without privileges or user interaction. The vulnerability is described across multiple sources as a PIN-crack via weak randomness in the WLAN driver. The CVSS v3.1 metrics (...

CVE-2025-20733

The wlan AP driver in MediaTek Chipsets and Aruba WLAN AP Driver is vulnerable to an out-of-bounds write caused by an incorrect bounds check . This flaw could allow an attacker to achieve local escalation of privilege requiring only User execution privileges , with no user interaction necessary. ...

CVE-2024-20139

A security vulnerability exists in MediaTek Chipsets (Bluetooth firmware) due to the improper handling of exceptional conditions, which can trigger a firmware assertion . This flaw can lead to a local denial of service without requiring additional execution privileges or user interaction. Remedia...

CVE-2024-20071

The wlan driver is vulnerable to an out-of-bounds read caused by improper input validation . This flaw could lead to local information disclosure , although it requires System execution privileges for exploitation. No user interaction is required to trigger the vulnerability. While specific affec...

CVE-2025-20693

A vulnerability exists in the MediaTek Wlan STA Driver microprogramming software due to an incorrect bounds check leading to an out-of-bounds read in memory. This flaw could allow a remote attacker (proximal/adjacent) to disclose protected sensitive information without requiring additional execut...

CVE-2025-20720

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While...

CVE-2025-20709

A vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While specific...

CVE-2025-20691

A security vulnerability exists in the Wlan AP Driver software for MediaTek microprogramming chips . The root cause is an incorrect bounds check , which results in an out-of-bounds read from memory. This flaw could allow an attacker with User execution privileges to disclose sensitive local infor...

CVE-2025-20686

The MediaTek wlan AP driver (specifically identified in some contexts as a WLAN Access Point Controller ) is vulnerable to an out-of-bounds write caused by an incorrect bounds check . This memory corruption flaw could allow a remote attacker to achieve code execution without requiring additional ...

CVE-2025-20682

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for local escalation of privilege requiring user execution privileges, though no user interaction is necessary for exploitation. Re...

CVE-2025-20692

A vulnerability exists in the Wlan AP Driver software for MediaTek microprogramming chips . The issue stems from an incorrect bounds check that allows for an out-of-bounds read from memory. An attacker with User execution privileges could exploit this to disclose sensitive information without req...

CVE-2025-20711

A security vulnerability exists in the wlan AP driver (associated with MediaTek Chipsets ) due to an incorrect bounds check resulting in a possible out-of-bounds write . This flaw could allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges ...

CVE-2026-20430

A vulnerability exists in the wlan AP firmware of MediaTek Chipsets (and specifically Linksys Wlan AP ) due to an incorrect bounds check resulting in an out-of-bounds write . This flaw allows for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges ...

CVE-2025-20683

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for local escalation of privilege requiring only User execution privileges , and does not require user interaction for exploitation...

CVE-2025-20681

A security vulnerability exists in the wlan AP driver of MediaTek microprogramming chips due to an incorrect bounds check . This flaw leads to an out-of-bounds write in memory, which could allow a local attacker to achieve local escalation of privilege . Exploitation requires User execution privi...

CVE-2025-20689

A vulnerability exists in the wlan AP driver of MediaTek microprogramming chips due to an incorrect bounds check leading to an out-of-bounds read . This flaw could allow an attacker with User execution privileges to disclose sensitive information or enhance their privileges. The vulnerability is ...

CVE-2025-20710

A vulnerability exists in the wlan AP driver (specifically in MediaTek Chipsets ) where an integer overflow can lead to an out-of-bounds write . This flaw could enable remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While n...

CVE-2025-20695

The Bluetooth driver’s firmware microprogramming software on MediaTek chips is vulnerable to a system crash due to a buffer's initial boundary violation (buffer underwrite/underflow). An unhandled exception can be triggered by a remote attacker, resulting in a remote denial of service (DoS). No a...

CVE-2025-20713

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can result in an out-of-bounds write . This flaw could lead to local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not requi...

CVE-2025-20717

A vulnerability exists in the wlan AP driver (specifically within MediaTek Chipsets ) caused by an incorrect bounds check that leads to an out-of-bounds write . This flaw could allow a malicious actor who has already obtained System privileges to perform a local escalation of privilege . The vuln...

CVE-2026-20419

A vulnerability exists in MediaTek Wireless LAN Drivers (wlan AP/STA firmware) where an uncaught exception can cause the system to become irresponsive. This flaw may allow for a remote (proximal/adjacent) denial of service without requiring additional execution privileges or user interaction. Aff...

CVE-2025-20688

A security vulnerability exists in the wlan AP driver of MediaTek microprogramming chips . The flaw is caused by an incorrect bounds check , which allows for an out-of-bounds read in memory. An attacker with User execution privileges can exploit this to disclose protected information or local dat...

CVE-2025-20731

CVE-2025-20731 affects the wlan AP driver (MediaTek chipset context) with an out-of-bounds write due to an incorrect bounds check. The issue could allow local escalation of privileges to System if OceReducedNeighborReport is disabled; exploitation requires no user interaction. Patch WCNCR00441511...

CVE-2025-20685

The MediaTek wlan AP driver is vulnerable to an out of bounds write caused by an incorrect bounds check. This flaw could allow a remote attacker to achieve code execution from a proximal or adjacent network without requiring additional privileges or user interaction. While the documents do not sp...