Android Kernel Memory Access Vulnerability in MediaTek Components Allowing Local Privilege Escalation

A vulnerability exists in certain MediaTek components of the Android operating system, allowing potential access to kernel memory from user space. This issue arises from an improper bounds check, which could lead to local privilege escalation without requiring additional execution privileges or user interaction. All supported Google Pixel and Nexus devices are affected.

Impact

Exploitation of this vulnerability could result in unauthorized access to kernel memory, potentially leading to local privilege escalation.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.