BaselineWatch
Desk

CVE-2025-20740

4.7 medium SSVC exploitation: none Analyzed

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 4.7 · mediatekNVD modified 2026-10-18 21:10

Affected (CPE criteria) 1

  • cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*

References 1