MediaTek Chipsets Out-of-Bounds Write Vulnerability in imgsensor Component

A vulnerability allowing out-of-bounds write has been identified in the imgsensor component of certain MediaTek chipsets. This issue arises from a missing bounds check, which could lead to local privilege escalation for an actor with System privileges. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized modification of memory, potentially leading to arbitrary code execution or other forms of privilege escalation.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. Instructions for accessing the patch are available through the MediaTek Product Security Bulletin.