MediaTek Keymaster Out-of-Bounds Read Vulnerability Allowing Local Information Disclosure

A vulnerability has been identified in the Keymaster component of MediaTek chipsets, specifically in the MT9972 series, running Android versions 12.0 and 14.0. The issue arises from a missing bounds check, which creates a potential out-of-bounds read. This vulnerability could lead to local information disclosure, but only if the attacker has already gained System privileges. Notably, exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure, potentially allowing an attacker to access sensitive data or system information.