MediaTek WLAN AP Driver Stack Overflow Vulnerability Allowing Privilege Escalation

A stack overflow vulnerability has been identified in the WLAN access point driver of certain MediaTek chipsets. This issue arises from an incorrect bounds check, leading to a possible out-of-bounds write. Exploitation of this vulnerability could allow local escalation of privileges, although it requires user execution privileges. Notably, user interaction is not needed for exploitation.

Impact

Exploitation of this vulnerability could result in a stack overflow, potentially allowing for arbitrary code execution or manipulation of the execution flow.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. Instructions for accessing the patch are available through the MediaTek Product Security Bulletin.