MediaTek Chipsets imgsys Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

A medium-severity out-of-bounds write vulnerability has been identified in the imgsys component of certain MediaTek chipsets, including MT6897 and MT6989. This vulnerability arises from a missing bounds check, which could lead to local privilege escalation for an actor with system privileges. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could result in a local escalation of privileges, allowing a user with system rights to gain additional, unauthorized rights or access.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.