MediaTek WLAN AP Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in the MediaTek WLAN Access Point (AP) driver, where an out-of-bounds write can occur due to an improper bounds check. This flaw could potentially lead to local privilege escalation, but requires that the attacker already has system privileges. The vulnerability does not require user interaction to be exploited.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system rights to gain elevated privileges.

Remediation

A patch for this vulnerability has been issued, and can be applied by following the instructions provided in the MediaTek November 2025 Product Security Bulletin.