CVE-2025-20631

The MediaTek MT7615/MT7622/MT7663/MT7915/MT7916/MT7981/MT7986 WLAN AP drivers are vulnerable to an out-of-bounds write caused by an incorrect bounds check. This vulnerability allows for local escalation of privilege without requiring additional execution privileges or user interaction. Remediatio...

CVE-2024-20017

A vulnerability exists in the wlan service of MediaTek Wi-Fi chipsets (specifically affecting the MT7622/MT7915 SDK and RTxxxx SoftAP driver bundle ) due to improper input validation. This flaw leads to an out-of-bounds write (buffer overflow) within the wappd network daemon , potentially allowin...

CVE-2024-20148

A security vulnerability exists in MediaTek chipsets affecting the wlan STA FW module. The flaw is caused by improper input validation , which can lead to an out-of-bounds write . This vulnerability could allow for remote code execution (proximal/adjacent) without requiring additional execution p...

CVE-2024-20146

The MediaTek wlan STA driver contains a vulnerability where improper input validation leads to a possible out-of-bounds write . This flaw could allow a remote attacker to achieve code execution without requiring additional execution privileges or user interaction. The vulnerability specifically a...

CVE-2024-20103

In CVE-2024-20103, MediaTek WLAN firmware contains an out-of-bounds write due to improper input validation, enabling remote code execution with no privileges or user interaction required. The vulnerability affects WLAN-related firmware (MediaTek) and is tracked under Patch ID ALPS09001358 and MSV...

CVE-2025-20654

A security vulnerability exists in the wlan service of MediaTek Chipsets due to an incorrect bounds check, which allows for a possible out of bounds write . This flaw could lead to remote code execution without requiring additional execution privileges or user interaction. While technical details...

CVE-2024-20100

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.

CVE-2026-20408

A heap buffer overflow in the wlan component of MediaTek Chipsets allows for an out-of-bounds write. This vulnerability can lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. While specific affected versions are not de...

CVE-2024-20018

The MediaTek WLAN driver contains a vulnerability caused by insufficient input validation , leading to a possible out-of-bounds write . This flaw allows an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. While some sources s...

CVE-2024-20101

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602.

CVE-2025-20633

In MediaTek WLAN AP driver, CVE-2025-20633 describes a bound-check error causing an out-of-bounds write that could enable remote code execution without user interaction. Impact is high (C/H/I/A = 8.8 CVSS). The issue affects MediaTek MT7603/MT7615/MT7622/MT7915/related WLAN AP driver code paths a...

CVE-2025-20632

CVE-2025-20632 concerns the WLAN AP driver with an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with no user interaction. A patch (Patch ID: WCNCR00397139; MSV-2188) is referenced. Connected sources consistently identify the WLAN AP driver as affect...

CVE-2025-20646

A security vulnerability exists in wlan AP FW (MediaTek Chipsets) caused by improper input validation , leading to a possible out-of-bounds write . This flaw could allow for remote escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be ad...

CVE-2025-20637

CVE-2025-20637 affects MediaTek MediaTek-based network hardware (network HW module). The vulnerability is caused by an uncaught exception in the network stack, which can cause a system hang and enable remote denial of service without requiring privileges or user interaction. The available documen...

CVE-2025-20694

A vulnerability exists in the Bluetooth firmware microprogramming software of MediaTek chips. The flaw is caused by an uncaught exception (and specifically a violation of the buffer’s initial boundary ), which can lead to a system crash . This condition allows a remote attacker to trigger a denia...

CVE-2024-20147

A security vulnerability exists in the Bluetooth FW of MediaTek chipsets due to improper exception handling , which can lead to a reachable assertion . This flaw allows an attacker to cause a remote denial of service without requiring additional execution privileges or user interaction. Remediati...

CVE-2025-20649

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue...

CVE-2025-20663

A vulnerability exists in the Wlan AP Driver software of MediaTek chipsets. The flaw is caused by an uncaught exception in the driver's exception handling, which could lead to remote (proximal/adjacent) information disclosure . This vulnerability does not require additional execution privileges o...

CVE-2025-20674

The CVE-2025-20674 entry concerns MediaTek wlan AP driver vulnerabilities in MediaTek chipsets, where a missing permission check allows injection of arbitrary packets. This can lead to remote escalation of privilege without extra execution privileges or user interaction. The issue is documented w...

CVE-2024-20073

A vulnerability exists in the wlan service where improper input validation allows for a possible out of bounds write . This flaw could lead to a local escalation of privilege , though it requires System execution privileges to exploit. Notably, user interaction is not needed for exploitation. Rem...

CVE-2025-20664

A vulnerability in the wlan AP driver of MediaTek chipsets, specifically within microprogramming-based components, allows for remote (proximal/adjacent) information disclosure . The root cause is an uncaught exception in the software driver's error handling. This vulnerability can be exploited wi...

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.

CVE-2024-20153

A security vulnerability exists in the wlan STA module of MediaTek Chipsets . An attacker can trick a client into connecting to an access point (AP) using a spoofed SSID . This flaw can lead to remote information disclosure without requiring additional execution privileges or user interaction. Re...

CVE-2024-20152

A security vulnerability exists in the wlan STA driver of MediaTek Chipsets due to improper exception handling , which results in a possible reachable assertion. If a malicious actor has already obtained System privilege , they could trigger a local denial of service . No user interaction is requ...

CVE-2024-20072

A vulnerability exists in the wlan driver due to an out-of-bounds write caused by improper input validation. This flaw could allow for local escalation of privilege with System execution privileges. Notably, no user interaction is required for exploitation. Remediation information includes Patch ...

CVE-2025-20690

The Wlan AP Driver in MediaTek microprogramming chips is vulnerable to an out-of-bounds read caused by an incorrect bounds check. This security flaw can lead to local information disclosure , allowing an attacker to access protected information. Exploitation requires User execution privileges , a...

CVE-2025-20733

CVE-2025-20733 affects the WLAN AP driver (Aruba MediaTek-based). The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Patch WCNCR00441509 (MSV-4138) mitigates this; vendor advisories an...

CVE-2024-20071

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364733; Issue ID: MSV-1331.

CVE-2024-20139

A security vulnerability exists in MediaTek Chipsets within the Bluetooth firmware due to the improper handling of exceptional conditions. This flaw can lead to a firmware assertion , resulting in a local denial of service (DoS). Exploitation does not require additional execution privileges or us...

CVE-2023-32831

CVE-2023-32831 concerns the wlan driver where use of insufficiently random values can enable a local information disclosure without privileges or user interaction. The vulnerability is described across multiple sources as a PIN-crack via weak randomness in the WLAN driver. The CVSS v3.1 metrics (...

CVE-2025-20693

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-...

CVE-2025-20720

CVE-2025-20720 relates to the wlan AP driver, where an incorrect bounds check can cause an out-of-bounds write. The description indicates this could enable remote (proximal/adjacent) privilege escalation without additional execution privileges and without user interaction. Connected sources corro...

CVE-2025-20686

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415570; Issue ID: MSV-3404.

CVE-2025-20682

A security vulnerability exists in the wlan AP driver within MediaTek Chipsets due to an incorrect bounds check that leads to an out-of-bounds write . This flaw allows for local escalation of privilege , requiring only User execution privileges for exploitation without the need for user interacti...

CVE-2025-20691

CVE-2025-20691 affects the WLAN Access Point (AP) driver in MediaTek chipsets. The root cause is an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure. Privilege requirements are LOW with LOCAL attack vector and no user interaction required for expl...

CVE-2025-20709

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID: MS...

CVE-2025-20710

CVE-2025-20710 affects the wlan AP driver in MediaTek chipsets, with an out-of-bounds write caused by an integer overflow. This could enable remote (proximal/adjacent) privilege escalation without user interaction. A patch is referenced (Patch ID: WCNCR00418785; Issue ID: MSV-3515). The public do...

CVE-2025-20683

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check leading to an out-of-bounds write . This flaw could allow for local escalation of privilege requiring only user execution privileges, with no user interaction required for exploitation. Rem...

CVE-2025-20681

The Wlan AP Driver software from MediaTek chipsets contains a vulnerability where an incorrect bounds check can lead to an out-of-bounds write in memory. This flaw allows a local attacker to achieve local escalation of privilege without requiring user interaction. Exploitation requires User execu...

CVE-2025-20692

A security vulnerability exists in the Wlan AP Driver software of MediaTek microprogramming chips. The flaw is caused by an incorrect bounds check , leading to a possible out-of-bounds read in memory. An attacker with User execution privileges could exploit this to disclose sensitive local inform...

CVE-2025-20711

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can lead to an out-of-bounds write . This flaw may allow for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction...

CVE-2025-20689

A vulnerability exists in the Wlan AP Driver software used in MediaTek microprogramming chips. The issue stems from an incorrect bounds check that leads to an out-of-bounds read in memory. This vulnerability could allow an attacker with User execution privileges to disclose sensitive local inform...

CVE-2025-20695

A vulnerability exists in the Bluetooth firmware microprogramming software of MediaTek chipsets. The root cause is an uncaught exception or a violation of the buffer’s initial boundary , which can be exploited to cause a system crash leading to a remote denial of service (DoS). Exploitation does ...

CVE-2025-20685

A vulnerability exists in the wlan AP driver of MediaTek microprogramming chips due to an incorrect bounds check. This flaw allows for an out-of-bounds write in memory, which could enable a remote attacker (proximal/adjacent) to achieve arbitrary code execution without requiring additional privil...

CVE-2025-20713

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check . This flaw can lead to an out-of-bounds write , potentially allowing a malicious actor with existing System privileges to achieve local escalation of privilege . No user interaction is req...

CVE-2025-20717

A security vulnerability exists in the wlan AP driver of MediaTek Chipsets due to an incorrect bounds check , which can result in an out-of-bounds write . This flaw could allow a malicious actor who has already obtained System privileges to achieve local escalation of privilege . No user interact...

CVE-2025-20688

The CVE-2025-20688 issue affects the wlan AP driver and is caused by an incorrect bounds check that enables an out-of-bounds read, leading to local information disclosure with User execution privileges needed (no user interaction required). The CVE records indicate a patch is available: WCNCR0041...

CVE-2025-20729

The CVE-2025-20729 entry describes an out-of-bounds write in the wlan AP driver caused by an incorrect bounds check. This can enable local privilege escalation for an attacker who already has System privileges, with no user interaction required. Public details consistently cite patch WCNCR0044151...

CVE-2026-20419

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR0...

CVE-2026-20430

A vulnerability in the wlan AP firmware of MediaTek Chipsets and Linksys Wlan AP (affected versions not specified) allows for an out-of-bounds write due to an incorrect bounds check . This flaw could lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution...