MediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

In its recent MediaTek Product Security Bulletin, the chipmaker disclosed two high-severity security vulnerabilities that affect multiple devices, including smartphones, tablets, AIoT (Artificial Intelligence of Things), smart displays, and more.

The vulnerabilities could allow attackers to escalate their privileges on affected devices, leading to unauthorized access and control. 

The vulnerabilities were identified and assessed using the Common Vulnerability Scoring System version 3.1 (CVSS v3.1), which assigns severity ratings based on their potential impact.

The two newly disclosed vulnerabilities, CVE-2024-20104 and CVE-2024-20106, have been classified as “High” in severity, posing a significant risk if left unpatched.

Protecting Your Networks & Endpoints With UnderDefense MDR – Request Free Demo

CVE-2024-20104: Out-of-Bounds Write in DA

The first vulnerability, CVE-2024-20104, is caused by an out-of-bounds write issue in the DA (Download Agent) component.

The problem arises from inadequate bounds checking, which could allow an attacker to write outside of the intended memory range.

This flaw could lead to a local privilege escalation, allowing attackers to gain higher access rights on the affected device. 

Notably, exploiting this vulnerability requires user interaction, but no additional execution privileges are necessary.

Devices utilizing the affected chipsets could be vulnerable if they run specific Android versions, OpenWRT, Yocto, or RDK-B software.

The vulnerability affects various MediaTek chipsets, including prominent models such as the MT6781, MT6879, and MT6983.

Affected Software Versions:

• Android: 12.0, 13.0, 14.0, 15.0
• OpenWRT: 19.07, 21.02, 23.05
• Yocto: 4.0
• RDK-B: 22Q3, 24Q1

CVE-2024-20106: Type Confusion in M4U

The second vulnerability, CVE-2024-20106, involves a confusion flaw in the M4U (Memory Management Unit) component.

Similar to CVE-2024-20104, this vulnerability can lead to an out-of-bounds write due to missing checks.

However, this flaw is more severe because it does not require user interaction and could allow attackers to gain system-level execution privileges.

This vulnerability affects many chipsets, including the MT6739, MT6765, and MT6885 models.

Affected Software Versions:

• Android: 12.0, 13.0, 14.0, 15.0

MediaTek has been working closely with device manufacturers (OEMs) to ensure that security patches addressing these vulnerabilities have been delivered.

OEMs have had access to the updates for over two months, allowing ample time to integrate them into software updates for their devices. 

Users are strongly encouraged to install the latest firmware and security updates on their devices to mitigate any potential risks associated with these vulnerabilities.

Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!