MediaTek Chipsets Privilege Escalation Vulnerability Due to Use-After-Free Memory Corruption

A use-after-free vulnerability has been identified in the Digital Post-Processing Engine (DPE) of certain MediaTek chipsets. This vulnerability can lead to memory corruption, potentially allowing a malicious actor with System privileges to escalate privileges further. The issue arises from improper memory management, where memory is freed but still accessible, creating a risk of exploitation. Notably, user interaction is not required for this vulnerability to be exploited.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with System privileges to gain elevated rights or access.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.