MediaTek Chipsets Android Power HAL Privilege Escalation Vulnerability

Vulnerability

A high-severity vulnerability allowing local privilege escalation has been identified in certain MediaTek chipsets running Android. This issue arises from a possible out-of-bounds write caused by a missing bounds check, which could be exploited if an attacker has physical access to the device. User interaction is required for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights or access on the device.

Remediation

MediaTek has issued a patch for this vulnerability, which is available to device OEMs. Instructions for applying the patch can be obtained through the MediaTek contact person.

Added: Aug 4, 2025, 2:24 AM
Updated: Aug 4, 2025, 2:24 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.7
remediation
0.0
relevance
0.3
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.