MediaTek Chipsets imgsys Component Memory Corruption Vulnerability Leading to Local Denial-of-Service

A memory corruption vulnerability has been identified in the imgsys component of certain MediaTek chipsets, including MT6897 and MT6989. This vulnerability arises from improper locking, which could allow a malicious actor with System privileges to cause a local denial-of-service. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability can lead to memory corruption, causing a system crash or unresponsiveness.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.