The vulnerability is an out‑of‑bounds write caused by a missing bounds check in the GNSS component of MediaTek chipsets. An attacker can trigger this flaw to corrupt memory, resulting in a local denial of service. No escalation of privileges is required for exploitation.

The affected product is the MediaTek GNSS module within its chipset family. Specific firmware or version details are not provided in the advisory.

Exploitation requires user interaction and does not provide escalation of privileges. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no known widespread exploitation at this time. However, because the flaw can lead to a denial of service and requires no special privileges, the risk remains moderate for systems that rely heavily on GNSS functionality.