MediaTek WLAN Stack Overflow Vulnerability Allowing Privilege Escalation

Vulnerability

A stack overflow vulnerability has been identified in the WLAN access point driver of certain MediaTek chipsets. This vulnerability arises from an incorrect bounds check, leading to a possible out-of-bounds write. If exploited, it could allow a local attacker with system privileges to escalate privileges, particularly when the OceReducedNeighborReport feature is disabled. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Added: Nov 4, 2025, 7:37 AM
Updated: Nov 4, 2025, 7:37 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
7.5
exploitability
3.0
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.