MediaTek Chipsets MAE Component Use-After-Free Vulnerability Leading to Denial-of-Service

A use-after-free vulnerability has been identified in the MAE component of certain MediaTek chipsets, including MT2718, MT6899, MT6991, MT8678, and MT8793. This vulnerability can cause a system crash, leading to a local denial-of-service condition. Exploitation requires the attacker to have already obtained system privileges, but no user interaction is needed.

Impact

Exploitation of this vulnerability can cause a system crash, leading to a local denial-of-service condition.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. For more information, OEMs can contact their MediaTek representative.