Volerion logoVolerion
Volerion logoVolerion

MediaTek WLAN AP Driver Heap Overflow Vulnerability Allowing Remote Code Execution

Vulnerability

A heap overflow vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver. This issue arises from an incorrect bounds check, leading to a possible out-of-bounds write. The vulnerability could be exploited to execute code remotely, with no additional execution privileges required. User interaction is not necessary for exploitation. The vulnerability affects several chipsets, including MT6890, MT7915, MT7916, MT7981, and MT7986, and is present in the SDK release 7.6.7.2 and earlier, as well as OpenWrt versions 19.07 and 21.02 (for MT6890).

Impact

Exploitation of this vulnerability could result in remote code execution on the affected device.

Added: Jul 8, 2025, 3:42 AM
Updated: Jul 8, 2025, 3:42 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
7.5
exploitability
4.9
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.