MediaTek WLAN Firmware EUVD-2026-52072

Exploitation requires the attacker to be within Wi-Fi radio range (adjacent network) of a device running affected MediaTek WLAN STA firmware on one of the confirmed chipsets (MT8532, MT7922, MT7921, MT7902, MT8518S). The WLAN interface must be active and in station (client) mode - the vulnerability is in the STA firmware path. No authentication, elevated privileges, or user interaction is required (PR:N, UI:N per CVSS). The limiting factors are purely physical: the attacker cannot exploit this remotely over the internet, only from within wireless proximity. There is no indication that a specific SSID association, network configuration, or non-default setting is required to trigger the condition, though this is inferred from the CVSS AC:L (low complexity) rating rather than confirmed by explicit vendor documentation.

The CVSS 3.1 base score of 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) accurately reflects the impact: high availability loss (full unresponsiveness), but constrained to the adjacent network vector - the attacker must be within Wi-Fi range. There is no confidentiality or integrity impact. EPSS at 0.15% (5th percentile) signals that automated or widespread opportunistic exploitation is unlikely given current telemetry; this is consistent with the adjacent-only attack surface and the specificity of triggering firmware-level logging exhaustion. The vulnerability is not listed in CISA KEV, and no public proof-of-concept has been identified. Real-world risk is moderate for environments where these chipsets are deployed in sensitive contexts (kiosks, embedded controllers, enterprise laptops in shared wireless spaces), but the physical proximity requirement significantly limits the attacker population. Organizations in high-density public Wi-Fi environments or those relying on these chipsets in critical infrastructure should prioritize patching, while isolated deployments represent lower urgency.

An attacker within Wi-Fi radio range of a device equipped with an affected MediaTek chipset (such as a laptop with an MT7921 adapter) transmits specially crafted wireless frames designed to trigger excessive logging activity in the WLAN STA firmware. The firmware's logging mechanism exhausts available resources without throttling, causing the device to become fully unresponsive - effectively a hard denial of service requiring a reboot. No prior authentication or user interaction is required, and the attacker needs only physical proximity to the target's wireless signal. No public proof-of-concept exploit has been identified at time of analysis.