MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A vulnerability in the WLAN Access Point (AP) driver of certain MediaTek chipsets has been identified, allowing for a local escalation of privilege. This issue arises from a possible out-of-bounds write caused by an incorrect bounds check, which could be exploited by a malicious actor who has already gained system privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.