CVE-2025-20685

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-206868.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cCVE-2025-206875.5In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service witCVE-2025-206885.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-206895.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-20695.0A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a loCVE-2025-206905.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-206915.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-206925.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-206936.5In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) iCVE-2025-206946.5In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additionCVE-2025-206956.5In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additionCVE-2025-206966.8In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attack
CVE-2025-20685: High severity, CVSS 8.8 | Vulnix