MediaTek Chipsets MAE Component Privilege Escalation Vulnerability

A vulnerability allowing out-of-bounds write operations has been identified in the MAE component of certain MediaTek chipsets. This issue arises from a missing bounds check, which could lead to local privilege escalation for an actor with System privileges. The vulnerability does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with System rights to gain elevated privileges.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.