MediaTek chipset vulnerability

What happened

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.

Affected versions

MediaTek chipset: MT5586; MT5862; MT5867; MT5870; MT5871; MT5872; MT5873; MT5876; MT5877; MT5879; MT5888; MT5889; MT5895; MT5896; MT5897; MT9015; MT9025; MT9026; MT9027; MT9032; MT9603; MT9618; MT9633; MT9649; MT9660; MT9676; MT9687; MT9689; MT9972 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.