MediaTek Chipsets Out-of-Bounds Write Vulnerability in Display Component Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the display component of certain MediaTek chipsets, where a missing bounds check could lead to a stack overflow. This out-of-bounds write issue has the potential for local privilege escalation, but requires that the attacker already has system privileges. The vulnerability arises from improper input validation, which could be exploited to manipulate memory and disrupt normal application behavior.

Impact

Exploitation of this vulnerability could result in a stack overflow, causing a system crash and potentially allowing for unauthorized privilege escalation.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: Dec 2, 2025, 3:25 AM
Updated: Dec 2, 2025, 3:25 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
2.8
remediation
0.0
relevance
1.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.