MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A vulnerability in the WLAN access point driver has been identified, allowing for a possible out-of-bounds write due to an incorrect bounds check. This vulnerability could lead to local privilege escalation, but requires that the attacker already has system privileges. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. Instructions for applying the patch should be available through the MediaTek contact person.