A heap buffer overflow exists in the WLAN Access Point driver of MediaTek chipsets, enabling memory corruption. This flaw can be triggered without user interaction and may result in remote code execution on the device at the privilege level of the executing user. The vulnerability is a classic buffer overflow (CWE-122), potentially compromising confidentiality, integrity, and availability if exploited.

The flaw affects MediaTek chipsets' WLAN AP driver. No specific version numbers are listed, so any firmware that includes the vulnerable driver may be impacted.

The CVSS score is 8.0, EPSS is not available, and the vulnerability is not listed in CISA KEV. The heap buffer overflow allows remote code execution without user interaction; it is inferred that an attacker would send crafted frames to the device. Because no user interaction is required, the threat is high; an attacker who can reach the WLAN AP could compromise confidentiality, integrity, and availability of the network and connected devices.