MediaTek Chipsets Out-of-Bounds Write Vulnerability in Display Component Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the display component of various MediaTek chipsets, where a missing bounds check could lead to a possible out-of-bounds write. This flaw has the potential to allow local escalation of privilege, but requires that the malicious actor already possesses System privileges. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with System privileges to gain elevated rights or access.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches. For further information, OEMs can contact their MediaTek representative.

Added: Jan 6, 2026, 2:48 AM
Updated: Jan 6, 2026, 2:48 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.8
remediation
0.0
relevance
1.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.