MediaTek WLAN AP Driver Heap Overflow Vulnerability Allowing Privilege Escalation

A heap overflow vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver. This issue arises from an incorrect bounds check, leading to a possible out-of-bounds write. The vulnerability could be exploited remotely (from a proximal or adjacent location) to escalate privileges, without requiring any additional execution privileges or user interaction. Affected chipsets include MT6890, MT7603, MT7615, MT7622, MT7915, MT7916, MT7981, and MT7986.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.