CVE-2025-20740

Medium · 4.7

CVSS

4.7

EPSS

0.1%

Published

Nov 4, 2025

CISA due date

—

The record

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.

Affected packages

Ecosystem	Package	Introduced	Fixed