Heap Buffer Overflow Vulnerability in MediaTek WLAN Access Point Driver

CVE-2026-20452

What is CVE-2026-20452?

The MediaTek WLAN Access Point driver is susceptible to a heap buffer overflow vulnerability that may result in memory corruption. This flaw could allow an attacker to execute code remotely with user execution privileges, posing significant security risks. User intervention is not required to exploit this vulnerability, making it a serious concern for users operating affected versions of MediaTek WLAN drivers. A patch (ID: WCNCR00480138) has been released to address this issue. For more details, refer to the MediaTek product security bulletin.

References