MediaTek’s imgsys module has a missing bounds check that can cause an out-of-bounds write. An attacker who already has system privileges can overwrite adjacent memory, potentially raising privileges or causing other unintended behavior. The flaw is categorized as CWE‑787, indicating untrusted data leads to an arbitrary write.

Chipsets that include the vulnerable component are MediaTek MT6897, MT6989, MT8370, MT8390 and MT8395, as well as devices running Android 15.0 that depend on these chipsets. All affected hardware runs the proprietary imgsys firmware bundled with the device’s SoC.

The CVSS v3 score of 6.7 places the vulnerability in the high severity range. EPSS indicates an exploitation likelihood of less than 1 %, and the flaw is not listed in the CISA KEV catalog. Exploitation requires local presence and system‑level privileges, and no user interaction is needed. Consequently, risk is moderate to high for environments where an unprivileged user can attain system privilege, such as through physical access or other compromise vectors.