A missing bounds check in MediaTek’s imgsys component can cause an out‑of‑bounds write. The flaw can be exploited by an attacker who already has System privileges, allowing the attacker to write data beyond the intended memory region and thus elevate privileges locally. No user interaction is required for the exploit. The weakness corresponds to CWE‑787: Out‑of‑Bounds Write.

The vulnerability affects MediaTek chipset products, specifically MT6897 and MT6989 series. It also impacts devices running Android 15.0 that use these chipsets, as identified in the CPE entries.

With a CVSS score of 7.8 the vulnerability is of medium‑high severity. The EPSS score of less than 1% indicates a low probability of exploitation at the time of analysis. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local access to a system with System privileges; once that prerequisite is met, the attacker can trigger the out‑of‑bounds write without further user interaction.