An out‑of‑bounds write occurs in the MediaTek chipset display firmware because a bounds check is missing. The flaw is a classic buffer overflow (CWE‑787). If an attacker already has System privileges on the device, exploiting this vulnerability could allow elevation of privileges within the local environment. No user interaction is required once the attacker has that foothold.

The vulnerability affects MediaTek chipsets, including the MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8196, MT8678, MT8793, and has implications for Android devices running versions 14.0, 15.0, and 16.0 that employ these chipsets.

The CVSS score of 6.7 indicates medium severity. Because the exploit requires an attacker to already have System privileges on the device, the likelihood of exploitation is low, reflected in an EPSS score of less than 1%. The bug is not listed in the CISA Known Exploited Vulnerabilities catalog, and the attack vector is local; user interaction is not needed once privileges are available.