Executive brief
MediaTek's Audio Hardware Abstraction Layer (HAL) contains a memory safety vulnerability that can allow privilege escalation on devices using affected MediaTek chipsets. An attacker who already has system-level access can exploit this flaw to elevate their privileges further, potentially gaining complete control over the device and compromising user data or device functionality.
Technical details
This is a use-after-free vulnerability in the Audio HAL component of MediaTek chipsets. The vulnerability occurs when memory that has already been freed is accessed, potentially allowing an attacker to read or write arbitrary memory. Exploitation requires the attacker to already possess system privilege; no user interaction is necessary. This leads to local privilege escalation. A patch has been made available (ALPS11191981) and affected device OEMs have been notified.
Affected products
- MediaTek Audio HAL
Timeline
- 2026-09-07: disclosed
- 2026-09-07: patched: Patch ID ALPS11191981