MediaTek PlayReady TA Out-of-Bounds Read Vulnerability Allowing Privilege Escalation

A vulnerability in the PlayReady Trusted Application (TA) component of MediaTek chipsets, specifically in the MT9972 chipset, has been identified. This issue arises from a missing bounds check, leading to a possible out-of-bounds read. Such a flaw could allow a malicious actor, who has already gained System privileges, to escalate privileges locally. The vulnerability does not require user interaction for exploitation. Affected software versions include Android 12.0 and 14.0.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with System privileges to gain elevated rights or access.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available through MediaTek's official channels.