Volerion logoVolerion
Volerion logoVolerion

MediaTek Chipsets Out-of-Bounds Write Vulnerability in WLAN AP Driver Allowing Remote Code Execution

Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the WLAN Access Point (AP) driver of certain MediaTek chipsets. This vulnerability arises from an incorrect bounds check, which could potentially allow for remote code execution by an adjacent attacker, without the need for additional execution privileges or user interaction. The issue affects MediaTek chipsets MT7603, MT7615, MT7622, and MT7915, specifically in the SDK release 7.4.0.1 and earlier.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
7.5
exploitability
4.9
remediation
6.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.