CVE:CVE-2022-26439
CNNVD:CNNVD-202208-1903
MediaTek wifi driver是中国联发科技（MediaTek）公司的一种 wifi 驱动程序。
MediaTek wifi 7.6.2.3驱动版本存在缓冲区错误漏洞，该漏洞源于在 wifi 驱动程序中缺少边界检查，攻击者可以利用该漏洞本地权限升级，以下产品和版本受到影响:MT7603、MT7610、MT7612、MT7613、MT7615、MT7620、MT7622、MT7628、MT7629、MT7915、MT7916、MT7986、MT8981。
solution:Upgrade mediatek mt7603_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7610_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7612_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7613_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7615_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7620_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7622_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7628_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7629_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7915_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7916_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt7986_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3; Upgrade mediatek mt8981_firmware to a higher version than 7.6.2.3,and avoid the version 7.6.2.3