CVE-2025-20736

MediumCVSS 6.7/10Last modified Oct 18, 2026

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-207377.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207386.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207396.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-20745.3The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to,CVE-2025-207404.7In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with UseCVE-2025-207416.7In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207428.0In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-207434.2In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a maliciouCVE-2025-207444.2In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious aCVE-2025-207454.2In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actoCVE-2025-207466.7In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege CVE-2025-207476.7In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege
CVE-2025-20736: Medium severity, CVSS 6.7 | Vulnix