MediaTek Chipsets Privilege Escalation Vulnerability via Use-After-Free in DPE

A use-after-free vulnerability has been identified in the Digital Post-Processing Engine (DPE) of certain MediaTek chipsets. This vulnerability can lead to memory corruption and allows for local privilege escalation, but requires user interaction for exploitation. The issue affects chipsets MT6899 and MT6991.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, potentially allowing a user to execute actions or commands with system-level rights.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.