Mediatek wireless adapter driver Heap Buffer Overflow DoS

The vulnerability of the mt7921acpiread function in the drivers/net/wireless/mediatek/mt76/mt7921/acpisar.c file of the Mediatek wireless adapter driver in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to...

kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c

A memory overflow and data corruption flaw were found in the Mediatek MT76 driver module for WiFi in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c. An oversized packet with too many rx fragments causes an overflow and corruption in memory of adjacent pages. A local attacker with a...