Volerion logoVolerion
Volerion logoVolerion

MediaTek Chipsets ims Service Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the ims service of certain MediaTek chipsets, where a missing bounds check could lead to an out-of-bounds write. This flaw has the potential to be exploited for remote privilege escalation, particularly if a user equipment (UE) device connects to a rogue base station controlled by an attacker. Notably, no additional execution privileges are required for exploitation, and user interaction is not needed.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation on the affected device.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: Nov 4, 2025, 7:52 AM
Updated: Nov 4, 2025, 7:52 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
5.0
exploitability
4.4
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.