MediaTek Chipsets Out-of-Bounds Write Vulnerability in Flash Tool V5 DA Lib Adaptor Allowing Local Privilege Escalation

Vulnerability

A vulnerability has been identified in the MediaTek Flash Tool V5 DA, specifically in the Lib adaptor, where a missing bounds check could lead to an out-of-bounds write. This vulnerability allows for local escalation of privilege, but requires physical access to the device. No additional execution privileges are needed, although user interaction is required for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized local privileges, allowing a user to gain elevated rights on the device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
5.0
exploitability
3.3
remediation
7.9
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.