MediaTek’s vdec component contains a type‑confusion bug that can cause an out‑of‑bounds write. The flaw can be leveraged by a local attacker with system privilege to modify memory beyond allocated bounds, potentially allowing execution of arbitrary code or modification of privileged data. The impact is a local elevation of privilege, enabling the attacker to gain higher privileges on the device.

The vulnerability affects MediaTek Inc. chipsets that use the vdec driver. No specific firmware or software version is listed, so all deployments using the vdec component are potentially exposed until a patch is applied.

The CVSS score of 6.7 indicates a medium‑to‑high severity vulnerability, while the EPSS is not available. The issue is not yet listed in the CISA KEV catalog, indicating that exploitation evidence is currently unknown. The attack requires local access and does not need user interaction. Because the flaw is an out‑of‑bounds write, exploitability is moderate to high for systems where the attacker already has system privileges. Unpatched devices remain at risk of local privilege escalation until the vendor releases a fix.