In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.
| Vendor | Product | Versions |
|---|---|---|
| mediatek | mediatek chipset | MT6890, MT7615, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| lenovo | computer | cert_advisory | 90% |
Updated severity to CRITICAL and clarified that no exploit exists.
Initial creation
