Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-20632: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

29
Routine
HIGH 7.8UPGRADE

CVE-2025-20632 is a high-severity flaw (CVSS 7.8) affecting software development kit. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397139; Issue ID: MSV-2188.

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score7.8 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.2% (top 93%)
CISA exploited listNo
WeaknessCWE-787
Published2025-02-03
Last modified2026-06-17
Publisher (CNA): MediaTek, Inc. · Vendor: mediatek

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

mediatek software development kit UPGRADE
Affected: <= 7.6.7.2
Fixed in: newer than 7.6.7.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy software-development-kit || rpm -q software-development-kit || software-development-kit --version
2. UPGRADE to newer than 7.6.7.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade software-development-kit
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade software-development-kit
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-20632?

software development kit: upgrade to newer than 7.6.7.2. Exact commands for each OS are on this page.

Is CVE-2025-20632 being exploited?

CVE-2025-20632 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-20632 affect?

CVE-2025-20632 affects software development kit. Severity is high (CVSS 7.8). In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. P

How urgent is CVE-2025-20632?

Priority 29/100. High severity

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.