MediaTek Chipsets Out-of-Bounds Write Vulnerability in Battery Allowing Privilege Escalation

A vulnerability has been identified in certain MediaTek chipsets, where a missing bounds check in the battery component could lead to an out-of-bounds write. This flaw has the potential for local privilege escalation, but requires that the attacker has already obtained system privileges. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in a local escalation of privileges on the affected device.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.