MediaTek WLAN Chipsets Heap Overflow Vulnerability Allowing Privilege Escalation

A heap overflow vulnerability has been identified in the WLAN access point driver of certain MediaTek chipsets. This vulnerability arises from an incorrect bounds check, leading to a possible out-of-bounds write. If exploited, it could allow a local attacker to escalate privileges, particularly if they have already obtained system privileges and the OceReducedNeighborReport feature is disabled. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.