MediaTek WLAN AP Driver Arbitrary Packet Injection Vulnerability Allowing Remote Privilege Escalation

A vulnerability in the MediaTek WLAN Access Point (AP) driver allows for the injection of arbitrary packets. This issue arises from a missing permission check, which could lead to remote privilege escalation without requiring additional execution privileges. Exploitation of this vulnerability does not need user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation on the affected system.

Remediation

Users can apply the patch identified by Patch ID WCNCR00413202 to address this vulnerability.