MediaTek WLAN AP Driver Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the WLAN Access Point (AP) driver of certain MediaTek chipsets. This issue arises from an incorrect bounds check, leading to a possible out-of-bounds write. The vulnerability allows for remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges or user interaction. Affected chipsets include MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, and MT7986.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.