Technical impact
The vulnerability is an out‑of‑bounds write in the Audio HAL caused by a heap buffer overflow. It can be triggered locally without remote access and does not require user interaction beyond normal usage. An attacker with user execution privileges can corrupt memory and crash the audio subsystem, leading to a denial of service. The weakness is categorized as an out‑of‑bounds write (CWE‑787).
Affected Systems
Affected hardware includes MediaTek chipsets in the MT6880, MT6890, MT6988, and MT6990 families, as well as the MT2735 and MT2737 models. The vulnerability is present in the default firmware and software running on these devices.
Risk and Exploitability
An EPSS score of < 1% indicates a low exploitation probability, and the issue is not listed in the CISA KEV catalog. The CVSS score of 5.5 places the vulnerability in the medium severity range. The vulnerability is local and relies on user‑level execution, which is common on most devices. Because it does not require user interaction beyond regular operation, any user could trigger it. The potential impact is a service crash, which can disrupt device functionality. Given the lack of public exploitation data, the immediate risk is moderate, but it remains important to address the flaw promptly.
