CVE-2026-20430
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check.
Published Mar 2, 2026 · updated Jun 17, 2026 · mediatek software development kit
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 2, 2026 · NIST NVD
Detected
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.
Jun 17, 2026 · NIST NVD
Updated
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.
Affected
- cpe mediatek/software development kitversion unspecified
- cpe openwrt/openwrt19.07.0
- cpe openwrt/openwrt21.02.0
- cpe openwrt/openwrt23.05.0
Sources
- CVE.orgVulnerability recordCVE-2026-20430
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-20430
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553;
nvd.nist.gov