MediaTek Chipsets Out-of-Bounds Write Vulnerability in cameraisp Component Allowing Privilege Escalation

Vulnerability

A vulnerability has been identified in the cameraisp component of certain MediaTek chipsets, including MT6878, MT6879, MT6881, MT6886, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8168, MT8188, MT8195, MT8365, MT8370, MT8390, MT8395, MT8666, MT8667, MT8673, MT8676, MT8696, and MT8793. This vulnerability arises from a missing bounds check, leading to a possible out-of-bounds write. If exploited, it could allow a malicious actor with System privileges to escalate privileges further.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: Feb 2, 2026, 9:28 AM
Updated: Feb 2, 2026, 9:28 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
2.2
remediation
0.0
relevance
2.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.