An integer overflow in the secure boot process can cause an out‑of‑bounds write, permitting an attacker with user execution privileges to trigger a denial of service. The weakness is consistent with CWE‑190 (Integer Overflow) and CWE‑787 (Out‑of‑Bounds Write). The impact is a local service disruption or reboot of the device, compromising availability for the user.

MediaTek chipsets, specifically the MT6813 hardware and its firmware. Devices using these components are vulnerable and require updating of the secure boot firmware.

The CVSS score of 4.3 indicates moderate severity, and the EPSS score of less than 1% reflects a low likelihood of widespread exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires physical access to the device and user‑level privileges, but no additional user interaction is needed. In environments where devices are exposed to potential physical security risks, the risk is elevated however overall exploitation probability remains low.