MediaTek WLAN AP Driver Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an incorrect bounds check could lead to a possible out-of-bounds read. This vulnerability allows for local information disclosure and requires user execution privileges for exploitation. Notably, no user interaction is needed to exploit this issue. The vulnerability affects several chipsets, including MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT7981, and MT7986. It is present in the MediaTek SDK release 7.6.7.2 and prior, as well as OpenWrt versions 19.07 and 21.02.

Impact

Exploitation of this vulnerability could result in unauthorized local access to sensitive information, potentially leading to further exploitation or privilege escalation.