What happened
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
Affected versions
MediaTek chipset: MT6739; MT6761; MT6765; MT6768; MT6769; MT6781; MT6789; MT6835; MT6853; MT6855; MT6858; MT6877; MT6878; MT6879; MT6881; MT6883; MT6885; MT6886; MT6889; MT6893; MT6895; MT6897; MT6899; MT6983; MT6985; MT6989; MT6991; MT6993; MT8126; MT8171; MT8188; MT8189; MT8195; MT8196; MT8367; MT8370; MT8390; MT8391; MT8668; MT8676; MT8678; MT8755; MT8766; MT8768; MT8775; MT8781; MT8786; MT8788; MT8791; MT8792; MT8793; MT8798; MT8799; MT8863; MT8873; MT8875; MT8883; MT8893; MT8910 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.