The vulnerability resides in MediaTek’s slbc component, where type confusion can trigger an out‑of‑bounds write operation. This flaw permits an attacker who already possesses System‑level privileges to modify memory beyond intended bounds, potentially corrupting critical structures or escalating privileges. The impact is confined to the local environment and requires the attacker to have initial access with elevated privileges, but once exploited it could lead to full control over the affected device.

MediaTek, Inc. manufactures the affected MediaTek chipset. No specific firmware or version details are provided in the data, so all products incorporating slbc within this chipset family may be vulnerable.

The EPSS score is <1% and the vulnerability is not listed in CISA’s KEV catalog, indicating a low probability of exploitation. Because the described exploit demands already‑obtained System privileges and no user interaction, the attack surface is limited to compromised local contexts. Nonetheless, the potential for full device takeover warrants immediate attention and patch deployment. The CVSS score for this vulnerability is 6.7, indicating a moderate level of risk.