A critical stack-based buffer overflow in the MediaTek WLAN AP driver could allow a local attacker to escalate privileges on affected devices.

The vulnerability is a stack-based out of bounds write (CWE-121) caused by an incorrect bounds check in the WLAN AP driver. An attacker with local user execution privileges can exploit this flaw to achieve full system compromise without requiring user interaction.

The ability for a local user to escalate privileges represents a significant risk to device integrity and confidentiality. Given the CVSS score of 7.8, this vulnerability is categorized as High severity, as it allows unauthorized access to administrative functions or sensitive data stored on the hardware. Successful exploitation could lead to full system takeover, potentially impacting the availability and security of the broader network environment where these access points are deployed.

Immediate Action: Organizations should review the MediaTek product security bulletin for October 2025 and apply the provided SDK or firmware updates (Patch ID: WCNCR00419945) to all vulnerable hardware.

Proactive Monitoring: Monitor system logs for unusual process crashes or unexpected kernel-level errors that may indicate an attempt to trigger the stack overflow.

Compensating Controls: Restrict local user access on devices running the affected driver versions to minimize the attack surface for potential local privilege escalation attempts.

Public Exploit Available: No

Given the potential for local privilege escalation and the critical nature of driver-level vulnerabilities, administrators must prioritize the identification of affected hardware within their infrastructure. Applying the vendor-provided patch is the only definitive way to remediate this vulnerability, and it should be scheduled for deployment as soon as testing permits.