CVE-2025-20633

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Feb 3, 2025
Updated: Feb 18, 2025
CWE ID 787

Summary

CVE-2025-20633 is a vulnerability affecting wlan AP drivers. The issue stems from an incorrect bounds check, resulting in a possible out-of-bounds write. An attacker can exploit this flaw to execute remote code, requiring no additional privileges or user interaction. The patch for this vulnerability is identified as WCNCR00400889, and its Microsoft Security Bulletin counterpart is MSV-2491.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share