A critical out-of-bounds write vulnerability in MediaTek WLAN AP drivers poses a severe risk of unauthorized privilege escalation for adjacent attackers.

The flaw is an out-of-bounds write (CWE-787) within the WLAN access point driver. An unauthenticated, adjacent attacker can trigger this condition to achieve escalation of privilege, as the vulnerability requires no user interaction and no pre-existing privileges.

The CVSS score of 8.8 reflects the high severity of this flaw, which allows for full compromise of confidentiality, integrity, and availability at the driver level. Successful exploitation could grant an attacker control over affected network infrastructure, leading to unauthorized access to sensitive data and the potential for lateral movement within the network.

Immediate Action: Update affected devices to the latest SDK version provided by MediaTek or apply the specific patch identified as WCNCR00422399.

Proactive Monitoring: Monitor network traffic for unusual patterns originating from adjacent devices and review system logs for anomalies related to the WLAN driver service.

Compensating Controls: Implement network segmentation to isolate devices utilizing the vulnerable MediaTek chipsets from critical systems, thereby reducing the potential blast radius of an adjacent attack.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Given the potential for privilege escalation and the lack of required user interaction, administrators should prioritize patching all devices running the affected MediaTek WLAN driver versions. If immediate patching is not feasible, restrict access to the wireless management interfaces to trusted devices only until updates can be deployed.