MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an out-of-bounds write can occur due to an improper bounds check. This flaw could lead to local privilege escalation, but requires that the attacker already has system privileges. The issue does not require user interaction to exploit.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available through MediaTek's official channels.

Added: Nov 4, 2025, 7:33 AM
Updated: Nov 4, 2025, 7:33 AM

Vulnerability Rating

Custom Algorithm
spread
8.1
impact
7.5
exploitability
3.0
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.