CVE-2025-20732Medium· 4.2▾ SunlitIn wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport i…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the CISA ADP record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.
mt6890_mt7615_mt7622_mt7663_mt7915_mt7916_mt7981_mt7986 Versions:SDK release 7.6.7.2 and before / openWRT 19.07, 21.02Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-1151Medium· 5.5Kernel: stack overflow problem in open vswitch kernel module leading to dos
CVE-2023-6693Medium· 4.9Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
CVE-2024-31449High· 7.0Lua library commands may lead to stack overflow and RCE in Redis
CVE-2025-29988Medium· 6.9Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability
CVE-2023-20577High· 7.4A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.
CVE-2023-41251High· 7.2A stack-based buffer overflow vulnerability exists in the boa formRoute functionality of Realtek rtl819x Jungle SDK v3.4.11