CVE-2025-20728 is a high-severity vulnerability in the wlan STA driver caused by an incorrect bounds check leading to a possible out-of-bounds write. Exploitation requires local user privileges but no user interaction. The flaw could allow local privilege escalation with high impact on confidentiality, integrity, and availability.