CVE-2025-20732

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2025-11-04 Modified: 2026-11-03 First seen: 2026-11-03 Status: pending_score

Description

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
MediaTek, Inc. MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, MT7986 Versions:SDK release 7.6.7.2 and before / openWRT 19.07, 21.02

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.12%
Raw Score 0.001240
Percentile 2.2%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00124
2026-11-13
0.00124
2026-11-12
0.00124
2026-11-10
0.00124
2026-11-09
0.00124
2026-11-08
0.00124
2026-11-07
0.00124
2026-11-06
0.00124
2026-11-05
0.00124
2026-11-04
0.00124
2026-11-03
0.00124

Intelligence Sources

mitre ref →