MediaTek Chipsets Privilege Escalation Vulnerability in the imgsys Component

A use-after-free vulnerability has been identified in the imgsys component of certain MediaTek chipsets, leading to a possible local privilege escalation. This issue arises from improper memory management, allowing a malicious actor with System privileges to exploit the vulnerability. The flaw does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user to gain elevated rights or access within the system.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.