CVE-2025-20712 - CVE House
Back to Database
Status published Unknown CVE-2025-20712

In wlan AP driver, there is a possible out of...

Vulnerability Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20712

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

MediaTek, Inc.

View all reports →

Affected Software

MT6990, MT7990, MT7991, MT7992, MT7993
Vulnerable Versions:
SDK release 8.3.1.1 and before / OpenWrt 21.02, 23.05 (MT6990)

Timeline

Official Publish: October 14th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)