The vulnerability is a CWE‑787 out‑of‑bounds write in the MediaTek WLAN access point firmware caused by an insufficient bounds check. The flaw can be triggered without user interaction, allowing a malicious actor to alter memory structures and elevate privileges within the device. The impact is a local or proximal privilege escalation that grants the attacker higher level access without additional code execution capabilities.

The flaw affects MediaTek chipsets used in wireless access points, including the MT6890, MT7915, MT7916, MT7981, and MT7986 families. Devices running OpenWrt firmware versions 19.07.0, 21.02.0, or 23.05.0 on these chipsets are also impacted. Any network equipment that incorporates these MediaTek chipsets and runs the referenced firmware is vulnerable.

The CVSS score of 8.8 indicates high severity. The EPSS score of less than 1% suggests a low current exploitation probability, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation does not require user interaction and is likely to occur through crafted wireless traffic source proximity. Attackers could send specially constructed packets to the access point, causing the firmware to perform an out‑of‑bounds write and gain elevated privileges.