The flaw is in the display driver code for MediaTek chipsets. A missing bounds check can cause an out‑of‑bounds write, which is a classic out‑of‑bounds vulnerability that permits a local attacker who already has system or root privileges to modify memory and thereby elevate privileges.

Affected products are the MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8196, MT8678, MT8793, as well as devices running Android 14, Android 15, and Android 16 on those chipsets. The vendor’s advisory and patch ID ALPS10320471 address the flaw.

The CVSS v3.1 score is 6.7, indicating moderate severity, and the EPSS score is below 1 %, implying a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, and the data indicate that exploitation requires a local attacker with system privileges; no user interaction or network access is required. Therefore the primary risk is limited to environments where local privileged access is already compromised, but the lack of a remote trigger reduces the attack surface.