An integer overflow flaw exists in the display handling code of MediaTek chipsets. The overflow can be triggered without requiring any user interaction and could allow an attacker who already holds System privilege to elevate their privileges further within the local system environment.

The vulnerability affects MediaTek Inc. chipsets. Specific model or firmware versions are not listed in the supplied data, so all current MediaTek chipset releases may be at risk if they contain the vulnerable code path.

The exploit requires that the attacker has already achieved System-level access on the device; once that condition is met, the integer overflow can be leveraged to gain higher privileges. Because user interaction is unnecessary, the attack could be automated once the initial foothold is present. EPSS data is unavailable and the vulnerability is not listed in CISA’s KEV catalog, indicating that broad public exploitation has not yet been documented. The CVSS score of 6.7 reflects a medium severity level for this privilege escalation flaw. However, the local nature of the privilege escalation remains a significant risk for affected devices, especially in environments where privileged code runs without stringent isolation.