SB2026011996 - Multiple DrayTek routers update for WLAN driver



SB2026011996 - Multiple DrayTek routers update for WLAN driver

Published: January 19, 2026

Security Bulletin ID SB2026011996
Severity
Low
Patch available
YES
Number of vulnerabilities 18
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 18 secuirty vulnerabilities.


1) Stack-based buffer overflow (CVE-ID: CVE-2025-20732)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


2) Stack-based buffer overflow (CVE-ID: CVE-2025-20739)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


3) Stack-based buffer overflow (CVE-ID: CVE-2025-20738)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


4) Stack-based buffer overflow (CVE-ID: CVE-2025-20737)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


5) Stack-based buffer overflow (CVE-ID: CVE-2025-20736)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


6) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20735)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


7) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20734)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


8) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20733)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


9) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20731)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


10) Integer overflow (CVE-ID: CVE-2025-20710)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an integer overflow within wlan. A local application can execute arbitrary code.


11) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20729)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


12) Out-of-bounds read (CVE-ID: CVE-2025-20724)

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can gain access to sensitive information.


13) Heap-based Buffer Overflow (CVE-ID: CVE-2025-20720)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


14) Stack-based buffer overflow (CVE-ID: CVE-2025-20719)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


15) Stack-based buffer overflow (CVE-ID: CVE-2025-20718)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


16) Out-of-bounds write (CVE-ID: CVE-2025-20716)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


17) Out-of-bounds write (CVE-ID: CVE-2025-20715)

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.


18) Improper Validation of Specified Type of Input (CVE-ID: CVE-2025-20711)

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to an incorrect bounds check within wlan. A local application can execute arbitrary code.


Remediation

Install update from vendor's website.