Description (CNA)
In the Mediatek Preloader, there are out of bounds reads and writes due to an exposed interface that allows arbitrary peripheral memory mapping with insufficient blacklisting/whitelisting. This could lead to local elevation of privilege, given physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / Android | affected SoCVersion |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.