MediaTek WLAN AP Driver Uncaught Exception Leading to Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in the MediaTek WLAN Access Point (AP) driver. This issue arises from an uncaught exception, which could result in remote (proximal/adjacent) information disclosure. The vulnerability does not require any additional execution privileges or user interaction for exploitation. It affects several chipsets, including MT7915, MT7916, MT7981, MT7986, MT7990, and MT7992, with vulnerable software versions including SDK release 7.4.0.1 (for MT7915), 7.6.7.2 (for MT7916 and MT798X), and 8.2.1.4 (for MT799X) and prior.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.