MediaTek PlayReady TA Out-of-Bounds Read Vulnerability in DRM Server

A vulnerability allowing an out-of-bounds read has been identified in the PlayReady Trusted Application (TA) within the DRM server component. This issue arises from a missing bounds check, which could lead to local escalation of privilege. The vulnerability affects the MT9972 chipset and is present in MediaTek's software versions Android 12.0 and 14.0. Exploitation does not require user interaction, but it does necessitate that the attacker has already obtained System privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access to privileged information or capabilities, allowing a malicious actor to escalate privileges locally on the affected device.