A missing bounds check in the PCIe subsystem can cause an out‑of‑bounds write. The flaw is exploitable only by an attacker who already holds System privilege; user interaction is not required. If leveraged, the attacker may corrupt controlled memory regions and elevate privileges on the device, potentially compromising the entire system.

The vulnerability affects MediaTek chipsets MT6991, MT6993, and MT8678, as well as devices running Android 15.0 and Android 16.0 that integrate these chipsets. Patch identifiers ALPS10314946 and ALPS10340155 address the issue.

The CVSS score of 5.3 indicates moderate severity, while the EPSS of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access with System privilege; no external attack vector or user interaction is needed. Given its moderate impact and low exploit likelihood, the risk remains contained but warrants remediation.