Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-20709

No fix known EPSS <1%CVSS 8.8

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID: MSV-3405.

Published 2025-10-14 · CVE record · OSV

Products: MediaTek, Inc. MT6890, MT7915, MT7916, MT7981, MT7986