Privilege escalation via unrestricted peripheral memory mapping

Out-of-bounds access in the MediaTek Preloader on affected Android devices allows attackers to gain elevated privileges. The exposed interface maps attacker-selected peripheral memory without sufficient allowlisting or denylisting, permitting reads and writes outside intended bounds. Exploitation requires physical device access and user interaction; successful access compromises boot-stage confidentiality, integrity, and availability.