MediaTek WLAN AP Driver Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an incorrect bounds check could lead to a possible out-of-bounds read. This vulnerability allows for local information disclosure and requires user execution privileges for exploitation. Notably, user interaction is not necessary. The issue affects several chipsets, including MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, and MT7986. The vulnerable software versions include the WLAN SDK release 7.6.7.2 and earlier, as well as OpenWrt versions 19.07 and 21.02.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to further attacks or exploitation of other vulnerabilities.