Local privilege escalation via integer-overflow write

Integer overflow in MediaTek ged on Android 10.0, 11.0, and 12.0 allows local users with System access to gain elevated privileges. An undisclosed integer calculation in the ged component wraps and causes an out-of-bounds write; MediaTek has not identified the affected function or attacker-controlled input. Exploitation requires existing System execution privileges on an affected MediaTek chipset, but no user interaction, and the resulting memory corruption enables local privilege escalation.