MediaTek GNSS Driver Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A vulnerability in the GNSS driver of certain MediaTek chipsets allows for a local out-of-bounds write due to an improper bounds check. This flaw could lead to unauthorized privilege escalation, particularly for an actor who has already gained system-level privileges. The vulnerability does not require user interaction to exploit.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

A patch for this vulnerability is available as part of the MediaTek ALPS09920033 update. Device OEMs can refer to their MediaTek contact for further information.