CVE-2025-20734

MediumCVSS 5.3/10Last modified Oct 18, 2026

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-122CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-207357.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207366.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207377.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207386.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207396.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-20745.3The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to,CVE-2025-207404.7In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with UseCVE-2025-207416.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207428.0In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-207434.2In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a maliciouCVE-2025-207444.2In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious aCVE-2025-207454.2In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious acto