Local privilege escalation via ALAC bounds check

Android devices using affected MediaTek chipsets allow local users to gain privileges through an ALAC decoder flaw. The alac decoder performs an incorrect bounds check before writing decoded frame data, allowing a crafted audio frame to overwrite memory outside the internal output buffer. Exploitation requires local access but no additional execution privileges or user interaction, and can elevate privileges through the media decoding service.