The vulnerability is an out‑of‑bounds write in the ccci subsystem of MediaTek chipsets caused by a missing bounds check. An attacker who can send a malformed input to the ccci interface can overwrite adjacent memory, causing the system to crash and thereby denying service. The flaw is classified as CWE‑787 and does not grant additional execution privileges or privilege escalation.

Affected solutions include MediaTek chipsets such as the MT6880, MT6890, MT6813, MT6986, MT6982, MT6980D, MT2735 and MT2737. These models are commonly found in mobile and embedded devices that rely on MediaTek processor families.

Because the EPSS score is unavailable and the vulnerability is not listed in CISA's KEV catalog, no quantitative exploitation probability is provided. However, the denial‑of‑service impact is critical if exploited. The flaw requires user interaction to execute malformed input, meaning an attacker could trigger it through any remote channel that can interact with the ccci interface. No privilege escalation is possible, but the lack of a bounds check enables a crash directly from malformed input.