MediaTek Chipsets Out-of-Bounds Write Vulnerability in imgsys Component

A vulnerability allowing out-of-bounds write has been identified in the imgsys component of certain MediaTek chipsets. This issue arises from improper input validation, which could lead to local privilege escalation for an actor with system privileges. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability could result in a local escalation of privileges, allowing a user with system rights to gain additional, unauthorized privileges.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.