MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Leading to Privilege Escalation

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an out-of-bounds write can occur due to improper bounds checking. This vulnerability could allow for local escalation of privileges, requiring user execution rights for exploitation. Notably, no user interaction is necessary to trigger this issue. The vulnerability affects several chipsets, including MT6890, MT7615, MT7622, MT7663, and MT7915, and is present in the SDK release 5.1.0.0 and earlier, as well as OpenWrt versions 19.07 and 21.02.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.