Out Of Bounds Write Vulnerability in Mediatek imgsys Resource Management

CVE-2023-20841

Summary

The imgsys component in Mediatek software has a vulnerability that allows for an out-of-bounds write due to insufficient range checking. This deficiency can be exploited to achieve local privilege escalation, contingent on user interaction. Successful exploitation grants the attacker system execution capabilities, posing significant risks to device integrity. Users are advised to update to the patched version as outlined in the security bulletin.

References