MediaTek Chipsets c2ps Use-After-Free Vulnerability Allowing Privilege Escalation

A use-after-free vulnerability has been identified in the c2ps component of certain MediaTek chipsets. This vulnerability can lead to memory corruption and, if exploited, allows for local escalation of privileges, particularly for an actor who has already obtained system privileges. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in memory corruption, leading to potential unauthorized access to elevated privileges on the affected system.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.