An out‑of‑bounds write flaw exists in the MediaTek chipset metadata processing code due to a missing bounds check. The vulnerability can allow a local attacker to overwrite adjacent memory, potentially leading to privilege escalation on the device. The flaw is strictly local and does not require user interaction or remote access, and it does not grant additional execution privileges beyond what a local user already possesses.

This issue affects MediaTek chipsets manufactured by MediaTek, Inc. Specific models are not listed, but the vulnerability applies to all devices that incorporate the affected chipset firmware revisions. The patch IDs ALPS11049530 and ALPS11480843 address the missing bounds check.

The CVSS score of 6.8 indicates a medium severity. Because the exploit requires physical access to the device and does not depend on user interaction, the potential for exploitation is limited to environments where an attacker can physically reach the hardware. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower public exploitation likelihood. However, organizations operating in unsecured or semi‑secure settings should not assume the risk is negligible and should plan mitigations accordingly.