Local privilege escalation via stack overflow

Android on MediaTek chipsets 11.0 and 12.0 allows local users to gain privileges via power_hal_manager_service. The service copies attacker-controlled data into a fixed-size stack buffer without adequate bounds enforcement, enabling a stack-based overflow that bypasses permission checks. Exploitation requires local access but no additional execution privileges or user interaction, and can result in escalation to system-level capabilities.