CVE Catalog

CVE-2025-20737

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

4th percentile - higher than 4% of all known CVEs

Summary

In the wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

A local user may exploit the vulnerability to escalate privileges on the system, potentially leading to device compromise.

Recommendation

Apply the patch identified as WCNCR00435343 and restrict local access to vulnerable devices.

Other vulnerabilities in wlan AP driver

See all
Original NVD description (English source)

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS