# CVE-2025-20740: In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local…

Source: https://junglewise.ai/threats/cve-2025-20740-in-wlan-sta-driver-there-is-a-possible-out-of-bounds-read-due-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-04  
License: CC BY 4.0 with a link back

CVE-2025-20740 · Severity: medium · CVSS 4.7 · Published 2025-11-04

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036.

Technologies: [MediaTek Mt7902](https://junglewise.ai/threats/technologies/mt7902), [MediaTek Mt7920](https://junglewise.ai/threats/technologies/mt7920), [MediaTek Mt7921](https://junglewise.ai/threats/technologies/mt7921), [MediaTek Mt7922](https://junglewise.ai/threats/technologies/mt7922), [MediaTek Mt7925](https://junglewise.ai/threats/technologies/mt7925), [MediaTek Mt7927](https://junglewise.ai/threats/technologies/mt7927), [MediaTek Software Development Kit](https://junglewise.ai/threats/technologies/software-development-kit). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2025-20740 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-20740 being exploited in the wild.

**How severe is CVE-2025-20740?** Medium severity, with a CVSS score of 4.7, published 4 November 2025.

**Which products and versions are affected?** MediaTek Mt7902, MediaTek Mt7920, MediaTek Mt7921, MediaTek Mt7922 and 3 more. The advisory does not name versions.

**Is there a fix for CVE-2025-20740?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-20740?** Check whether you run MediaTek Mt7902, MediaTek Mt7920, MediaTek Mt7921 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- MediaTek Mt7902
- MediaTek Mt7920
- MediaTek Mt7921
- MediaTek Mt7922
- MediaTek Mt7925
- MediaTek Mt7927
- MediaTek Software Development Kit

## Related threats

- [MediaTek Bluetooth driver permission bypass](https://junglewise.ai/threats/cve-2026-20495-mediatek-bluetooth-driver-permission-bypass)
- [MediaTek WLAN STA firmware denial of service via logging](https://junglewise.ai/threats/cve-2026-20482-mediatek-wlan-sta-firmware-denial-of-service-via-logging)
- [In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…](https://junglewise.ai/threats/cve-2025-20748-in-wlan-ap-driver-there-is-a-possible-out-of-bounds-write-due-to)
- [In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote…](https://junglewise.ai/threats/cve-2025-20742-in-wlan-ap-driver-there-is-a-possible-out-of-bounds-write-due-to)
- [In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…](https://junglewise.ai/threats/cve-2025-20741-in-wlan-ap-driver-there-is-a-possible-out-of-bounds-write-due-to)