CVE-2018-9394

Summary

CVE-2018-9394 is a vulnerability affecting the mtk_p2p_wext_set_key function in the Linux driver for MediaTek Wi-Fi connectivity. The issue arises from improper input validation, leading to an out-of-bounds (OOB) write. Successful exploitation of this vulnerability can result in local privilege escalation, granting the attacker System execution privileges, without requiring any user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.