CVE-2025-20684

CVE-2025-20684 is a critical out-of-bounds write vulnerability in MediaTek's WLAN AP driver, affecting products such as mt7615, mt7622, mt7663, and their SDK. With a CVSS score of 9.8, it allows for remote, unauthenticated attackers to achieve local escalation of privilege without user interaction, leading to full compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential interest from threat actors. Organizations using affected MediaTek products should prioritize applying the patch (WCNCR00416939) to mitigate this severe risk.