MediaTek Chipsets Out-of-Bounds Write Vulnerability in Mminfra Component Allowing Privilege Escalation

A vulnerability has been identified in the mminfra component of certain MediaTek chipsets, allowing for a possible out-of-bounds write due to a missing bounds check. This vulnerability could lead to local privilege escalation, but requires that the attacker has already obtained system privileges. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in a local escalation of privileges on the affected device.

Remediation

MediaTek has notified device OEMs of this vulnerability and provided the corresponding security patches. For further information, OEMs can contact their MediaTek representative.