MediaTek Chipsets Out-of-Bounds Write Vulnerability in scp Component Allowing Local Privilege Escalation

A vulnerability has been identified in the scp component of certain MediaTek chipsets, specifically in the MT6878, MT6897, MT6899, MT6989, MT6991, MT8775, and MT8796 series, all running Android versions 14.0 or 15.0. This vulnerability arises from a missing bounds check, leading to a possible out-of-bounds write. If exploited, it could allow a malicious actor with System privileges to escalate privileges further.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with System rights to gain elevated privileges.