Technical impact
A missing bounds check in the Neuropilot component of MediaTek chipsets allows an out‑of‑bounds write, which can corrupt memory and elevate a local process to a higher privileged level. This type of vulnerability is classified as a memory corruption flaw (CWE‑787). The flaw does not require any additional execution privileges to be exploited, meaning that a local user or process can trigger escalation purely by interacting with the vulnerable firmware.
Affected Systems
MediaTek chipsets that run the Neuropilot firmware are impacted. The issue is documented in MediaTek’s security bulletin with Patch ID ALPS11249050 and Issue ID MSV‑9172.
Risk and Exploitability
With a CVSS score of 8.4, the vulnerability is classified as high severity, reflecting a significant potential for damage. The EPSS score is not available and the vulnerability is not listed in CISA KEV, indicating limited publicly known exploitation. Nonetheless, the absence of an extra execution requirement makes the local attack vector straightforward. The potential for immediate privilege escalation without user interaction underscores a high risk to affected devices.
