CVE-2025-20732

MediumCVSS 5.3/10Last modified Oct 18, 2026

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-207337.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207345.3In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207357.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207366.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207377.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207386.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207396.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-20745.3The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to,CVE-2025-207404.7In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with UseCVE-2025-207416.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207428.0In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-207434.2In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a maliciou
CVE-2025-20732: Medium severity, CVSS 5.3 | Vulnix