The vulnerability resides in the WLAN STA driver of MediaTek chipsets. A missing bounds check permits an attacker with user execution privileges to overwrite memory, potentially gaining higher privileges or taking control of the device. The flaw does not require user interaction and can be triggered locally, meaning it is not dependent on network exposure.

Affected products include MediaTek chipsets such as MT7902, MT7920, MT7921, MT7922, MT7925, MT7927, as well as the NBiot SDK. The flaw impacts the WLAN STA driver component in these devices.

With a CVSS score of 9.3 the vulnerability is considered severe, though the EPSS score is less than 1%, indicating a low current probability of exploitation. The flaw is not listed in the CISA KEV catalog. Exploitation requires local access and user‑level privileges; once triggered, the off‑by‑range write could lead to privilege escalation.