MediaTek Geniezone Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the MediaTek geniezone component, affecting chipsets such as MT6765, MT6768, MT6789, MT6877, MT6899, MT6989, MT6991, MT6993, MT8367, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8893, and MT8910. The vulnerability arises from a missing permission check, which could allow a malicious actor with System privileges to escalate privileges further. Exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with System privileges to gain elevated rights or access within the system.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. For further information, OEMs can contact their MediaTek representative.