MediaTek Chipsets SLBC Component Out-of-Bounds Write Vulnerability Allowing Privilege Escalation

Vulnerability

A type confusion vulnerability has been identified in the SLBC component of certain MediaTek chipsets, leading to a possible out-of-bounds write. This vulnerability could allow local privilege escalation for an actor who has already gained system privileges. The issue does not require user interaction to exploit.

Impact

Exploitation of this vulnerability could result in unauthorized access to elevated privileges, allowing a user to perform actions or access resources that are normally restricted.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: May 4, 2026, 7:38 AM
Updated: May 4, 2026, 7:38 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.8
exploitability
2.8
remediation
7.7
relevance
7.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.