MediaTek Chipsets Privilege Escalation Vulnerability in m4u Component

A vulnerability allowing local escalation of privilege has been identified in the m4u component of certain MediaTek chipsets. This issue arises from a possible out-of-bounds write caused by a missing bounds check, which could be exploited if a malicious actor has already gained System privileges. The vulnerability does not require user interaction for exploitation. Affected chipsets include MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8666, MT8667, MT8673, and MT8768. The vulnerability affects several different software versions, including Android 12.0, 13.0, 14.0, and 15.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

MediaTek has released a patch for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available through MediaTek's official channels.