MediaTek Chipsets Privilege Escalation Vulnerability in PCIe Component

A vulnerability allowing local privilege escalation has been identified in the PCIe component of certain MediaTek chipsets. This issue arises from a possible out-of-bounds write caused by a missing bounds check, which could be exploited by an actor who has already gained system privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

MediaTek has issued patches for this vulnerability, which can be applied by device OEMs. Instructions for accessing these patches are available through MediaTek's official channels.