MediaTek Chipsets WLAN AP Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the WLAN Access Point (AP) driver of certain MediaTek chipsets. This vulnerability involves a possible out-of-bounds write caused by an incorrect bounds check, which could lead to local escalation of privileges. The issue does not require any additional execution privileges or user interaction for exploitation. Affected chipsets include MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, and MT7986. The vulnerability is present in the SDK release 7.6.7.2 and prior.

Impact

Exploitation of this vulnerability could result in unauthorized local privilege escalation, allowing a user to gain elevated rights or access within the system.