attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
MediaTek, Inc.
MediaTek chipset
MediaTek
mt6993_firmware
MediaTek
mt8781_firmware
MediaTek
mt8910_firmware
MediaTek
mt8188_firmware
MediaTek
mt8189_firmware
MediaTek
mt8668_firmware
MediaTek
mt8793_firmware
MediaTek
mt6881_firmware
MediaTek
mt8875_firmware
Subsystems
General OT
Sectors
Multiple
What to Know
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171. (NVD)
What to Do
Monitor MediaTek, Inc.'s and MediaTek's web pages for any future patch releases. See vendor advisory link below.