MediaTek Chipsets Display Component Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

Vulnerability

A high-severity vulnerability has been identified in the display component of certain MediaTek chipsets, including MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8196, MT8678, and MT8793. The vulnerability arises from a missing bounds check, leading to a possible out-of-bounds write. This flaw could be exploited for local privilege escalation, particularly by an actor who has already gained system privileges. Notably, user interaction is not required for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. For more information, consult the MediaTek Product Security Bulletin or contact your MediaTek representative.

Added: Mar 2, 2026, 9:49 AM
Updated: Mar 2, 2026, 2:36 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
2.2
remediation
0.0
relevance
3.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.