CVE-2025-20729:

Out-of-bounds write vulnerability in MediaTek WLAN AP driver allows local privilege escalation.

Score
A numerical rating that indicates how dangerous this vulnerability is.

4.2Medium

Published Date:Nov 4, 2025
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.0
EPSS Percentile:4%

Exploitability

Score:0.8
Attack Vector:LOCAL
Attack Complexity:LOW
Privileges Required:HIGH
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:3.4
Confidentiality Impact:LOW
Integrity Impact:LOW
Availability Impact:LOW

Description Preview

Out-of-bounds write vulnerability in MediaTek WLAN AP driver allows local privilege escalation.

Overview

The vulnerability (CVE-2025-20729) affects the WLAN AP driver in MediaTek devices. It is characterized by an out-of-bounds write vulnerability resulting from an improper bounds check. This flaw could be exploited by an attacker who has already obtained System privileges to further escalate their privileges on the affected device. The vulnerability does not require user interaction for exploitation, making it particularly concerning. The issue has been assigned the internal tracking number MSV-4153 by MediaTek. From a technical standpoint, the vulnerability is classified as CWE-122, which refers to a heap-based buffer overflow. This type of vulnerability can lead to corruption of data, crashes, or code execution. The CVSS v3.1 score of 4.2 indicates a medium severity, with the attack vector being local, attack complexity low, and privileges required being high. The potential impact on confidentiality, integrity, and availability is assessed as low.

Remediation

MediaTek has addressed this vulnerability with a patch identified as WCNCR00441512. Users and administrators of affected MediaTek devices should apply this patch as soon as it becomes available through their device manufacturer or service provider. It is crucial to keep all MediaTek-based devices updated with the latest security patches to mitigate this and other potential vulnerabilities.
In addition to applying the patch, it is recommended to implement the principle of least privilege, ensuring that users and processes operate with the minimum level of access necessary. This can help limit the potential impact of similar vulnerabilities in the future.