This vulnerability is a use‑after‑free bug in the GPU PDMA subsystem that can corrupt memory. An attacker with local user privileges can trigger the memory corruption to execute arbitrary code with elevated privileges, effectively bypassing the intended privilege boundary. The flaw does not require user interaction, which allows any local user to exploit it without additional triggers.

The affected platform is a MediaTek chipset, as identified by MediaTek, Inc. No specific firmware versions are listed in the available data, but all MediaTek devices relying on the affected PDMA driver code are potentially vulnerable. The vendor issue ID for the patch is MSV-9545, corresponding to patch ID ALPS11365081.

Given that the flaw operates in kernel space and allows memory corruption, the potential impact is high. The lack of requirement for external triggers or network access makes it a straightforward local privilege escalation. While the EPSS score is not available and the vulnerability is not currently listed in CISA's KEV catalog, a use‑after‑free condition typically corresponds to a high CVSS score (often above 9). The vulnerability can be reliably exploited by any local user with the ability to run code, which increases its exploitability.