MediaTek WLAN Integer Overflow Vulnerability Leading to Out-of-Bounds Write and Privilege Escalation

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an integer overflow can lead to an out-of-bounds write. This vulnerability allows for remote (proximal/adjacent) escalation of privilege, with no additional execution privileges required. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.