CVE-2025-20742

High · 8.0

CVSS

8.0

EPSS

0.3%

Published

Nov 4, 2025

CISA due date

—

The record

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID: MSV-3949.

Affected packages

Ecosystem	Package	Introduced	Fixed