The vulnerability is a missing bounds check in MediaTek battery firmware that can cause an out‑of‑bounds write. This flaw permits a local attacker who already holds system privileges to corrupt memory, potentially leading to privilege escalation. The weakness corresponds to CWE‑787, an out‑of‑bounds write.

Security updates are required for devices running MediaTek chipset firmware. No specific version information is available, so all MediaTek powered battery modules are potentially affected until the patch is applied.

The flaw is local and does not require user interaction. The CVSS score of 6.7 indicates medium severity. Although no EPSS score or KEV listing is available, the vulnerability allows a local attacker who already has system privileges to perform an out‑of‑bounds write that can lead to privilege escalation, underscoring the need for a timely patch.