MediaTek Chipsets Display Component Out-of-Bounds Read Vulnerability Allowing Local Information Disclosure

A vulnerability has been identified in the display component of certain MediaTek chipsets, including MT6991, MT6993, MT8196, MT8678, and MT8793. This vulnerability arises from a missing bounds check, which creates a potential for out-of-bounds read. If exploited, this could lead to local information disclosure, but requires the attacker to have already obtained system privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, potentially leading to further exploitation of the affected system or application.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. For more information, OEMs can contact their MediaTek representative.