MediaTek Chipsets Out-of-Bounds Write Vulnerability in WLAN AP Driver Allowing Privilege Escalation

A vulnerability has been identified in the WLAN Access Point (AP) driver of certain MediaTek chipsets, allowing for a local escalation of privilege. This issue arises from an incorrect bounds check, which creates a potential out-of-bounds write. The vulnerability can be exploited by a malicious actor who has already obtained system privileges. Notably, user interaction is not required for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.