CVE-2025-20731

CVE-2025-20731 affects the wlan AP driver (MediaTek chipset context) with an out-of-bounds write due to an incorrect bounds check. The issue could allow local escalation of privileges to System if OceReducedNeighborReport is disabled; exploitation requires no user interaction. Patch WCNCR00441511...

CVE-2025-20732

The CVE-2025-20732 entry describes a local privilege-escalation flaw in the wlan AP driver (Linksys Wireless Network Controller Driver) caused by an incorrect bounds check that enables an out-of-bounds write. Impact is local, with no user interaction required, and exploitation is not detailed in ...

CVE-2025-20734

The CVE-2025-20734 entry describes a local privilege-escalation flaw in the wlan AP driver (MediaTek chipset family) caused by an out-of-bounds write due to an incorrect bounds check. Impact is local (no user interaction required) with Privileges Required: Low and an overall “Low” confidentiality...

CVE-2025-20742

The wlan AP driver contains an out of bounds write vulnerability caused by an incorrect bounds check . This flaw could allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability is associated with MediaTek ...

CVE-2025-20715

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check . This flaw can lead to an out-of-bounds write , potentially allowing a malicious actor with existing System privilege to achieve local escalation of privilege . No user interaction is requ...

CVE-2025-20737

A security vulnerability exists in the wlan AP driver (specifically associated with MediaTek Chipsets and Aruba WLAN AP Driver ) due to an incorrect bounds check leading to an out-of-bounds write . Successful exploitation allows a local user to achieve local escalation of privilege ; this require...

CVE-2025-20684

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; Issue ID: MSV-3422.

CVE-2025-20719

The CVE-2025-20719 entry concerns the MediaTek wlan AP driver with an out-of-bounds write caused by an incorrect bounds check. This can enable remote (proximal/adjacent) privilege escalation without user interaction, with an attack vector described as adjacent and a high impact on confidentiality...

CVE-2025-20748

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950.

CVE-2025-20728

A vulnerability exists in the wlan STA driver (associated with Qualcomm and MediaTek Chipsets ) due to an incorrect bounds check resulting in an out-of-bounds write . This flaw could lead to local escalation of privilege , requiring only User execution privileges for exploitation, with no user in...

CVE-2025-20714

Summary : CVE-2025-20714 concerns the wlan AP driver with an out-of-bounds write caused by an incorrect bounds check. The impact is local escalation of privilege if an attacker already has System privileges; exploitation does not require user interaction. The fixed patch is indicated as WCNCR0043...

CVE-2025-20739

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038.

CVE-2025-20741

The wlan AP driver (specifically associated with Aruba and MediaTek Chipsets ) is vulnerable to an out-of-bounds write caused by an incorrect bounds check . If a malicious actor already possesses System privileges , they can exploit this flaw to achieve local escalation of privilege . No user int...

CVE-2025-20724

CVE-2025-20724 affects the wlan AP driver with an out-of-bounds read caused by an incorrect bounds check, enabling local information disclosure with user privileges and no user interaction. Exploitation details are not provided across the connected documents; the patch is listed as WCNCR00418894 ...

CVE-2025-20735

CVE-2025-20735 concerns the MediaTek WLAN AP driver. A flaw in the bounds check enables an out-of-bounds write, which could lead to local privilege escalation with User privileges. No user interaction is required. A patch is identified: WCNCR00435349 (Issue MSV-4051).

CVE-2025-20736

A security vulnerability exists in the wlan AP driver (associated with MediaTek Chipsets and Aruba WLAN AP Driver ) due to an incorrect bounds check . This flaw allows for a potential out-of-bounds write , which could lead to local escalation of privilege if an attacker has already obtained Syste...

CVE-2025-20712

CVE-2025-20712 concerns the wlan AP driver. The advisory reports an incorrect bounds check that can cause an out-of-bounds write . The consequence is remote (proximal/adjacent ) escalation of privilege with no additional execution privileges required , and no user interaction needed. The vulnerab...

CVE-2025-20718

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.

CVE-2025-20738

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039.

CVE-2025-20740

The wlan STA driver (associated with MediaTek and Qualcomm chipsets) contains an out-of-bounds read vulnerability caused by a race condition (specifically a Time-of-check Time-of-use (TOCTOU) condition). An attacker with User execution privileges could exploit this to cause local information disc...

CVE-2025-20716

CVE-2025-20716 affects the wlan AP driver. Root cause: out-of-bounds write due to an incorrect bounds check. Impact: local escalation of privilege to SYSTEM if exploited; exploitation is possible with local access (no user interaction). Patch ID: WCNCR00421149; Issue ID: MSV-3728.