MediaTek Chipsets Battery Component Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the battery component of certain MediaTek chipsets. This issue arises from a possible out-of-bounds write caused by a missing bounds check, which could be exploited by a malicious actor who has already gained system privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.