MediaTek WLAN Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability in the WLAN access point driver of certain MediaTek chipsets allows for a local out-of-bounds write due to improper bounds checking. This flaw could be exploited by an attacker who has already gained system privileges, potentially leading to unauthorized privilege escalation. The vulnerability does not require user interaction to be exploited.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation on the affected system.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. Instructions for accessing the patch are available through MediaTek's official channels.

Added: Oct 14, 2025, 10:31 AM
Updated: Oct 14, 2025, 2:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
7.5
exploitability
3.0
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.