In the MediaTek Video HAL driver, a missing bounds check allows a local user to write beyond allocated memory. The flaw can be exploited without requiring user interaction or additional execution privileges, enabling the attacker to gain higher system privileges. This vulnerability is a classic stack‑based buffer overflow (CWE‑121).

The vulnerability affects MediaTek chipsets. Specific affected firmware or chipset model versions are not listed in the known product information; a general update to any MediaTek device using the Video HAL component is advised.

The CVE has no EPSS score available and is not listed in the CISA KEV catalog, suggesting it has not been actively exploited in the wild yet. Additionally, the CVSS score of 8.4 indicates high severity. However, the severity is significant because the flaw permits local privilege escalation without extra prerequisites. Successful exploitation would give the attacker full control over the device by hijacking the execution flow of the Video HAL process.