MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Leading to Privilege Escalation

A vulnerability in the WLAN Access Point (AP) driver allows for a possible out-of-bounds write due to an incorrect bounds check. This flaw could lead to local privilege escalation, but requires the attacker to have already obtained system privileges. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. Instructions for accessing the patch are available through the MediaTek Product Security Bulletin.