This vulnerability arises from a race condition in MediaTek's Media Data Distribution Protocol (MDDP) that can cause a system crash. The crash propagates a denial‑of‑service condition, disrupting continuity of operation for the affected device. Because the flaw occurs at the system level, the impact is limited to the local device but results in the loss of all services provided by the affected component.

The flaw is present on a broad range of MediaTek chipsets, including the MT6835, MT6855, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8188, MT8678, MT8755, MT8771, MT8797, and MT8798. Devices running Android 14, 15, or 16 that incorporate these chipsets are vulnerable as well.

The CVSS score of 4.4 indicates a moderate severity of this denial‑of‑service condition. The EPSS score of less than 1% implies a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local, privileged access to the system and does not require any user interaction. Once a malicious actor has obtained system privileges, they can trigger the race condition to induce a crash, potentially compromising device availability.