CVE-2026-20452: Buffer Overflow
In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch WCNCR00480138 - Compensating control
Apply the vendor fix for the wlan AP driver memory corruption (heap buffer overflow) identified as Issue ID MSV-6295, to reduce the risk of remote code execution (User execution privileges; no user interaction required).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20452?
CVE-2026-20452 has a high severity rating of 8, indicating significant risk.
How do I fix CVE-2026-20452?
To fix CVE-2026-20452, apply the patch identified as WCNCR00480138.
What type of vulnerability is CVE-2026-20452?
CVE-2026-20452 is a buffer overflow vulnerability in the WLAN AP driver.
Who is affected by CVE-2026-20452?
CVE-2026-20452 affects users of Microsoft WLAN AP driver and multiple MediaTek firmware versions.
What are the potential consequences of CVE-2026-20452?
Exploitation of CVE-2026-20452 could lead to remote code execution with user execution privileges.