Multiple MediaTek Chip CCCI Input Validation Error Vulnerability

MediaTek Inc. is the world’s fourth largest fab semiconductor company and a market leader in mobile devices, smart home applications, wireless connectivity technologies and IoT products, with approximately 1.5 billion devices with MediaTek chips built into them marketed around the world each year. A number of MediaTek chips have input validation error vulnerabilities in the CCCI. The vulnerability stems from the lack of boundary checks in the CCCI, which could be exploited by attackers to elevate privileges without the need for user interaction.