This vulnerability exists in the MediaTek mtee component where a type confusion bug could allow a malicious actor who already possesses System privilege to gain higher privilege levels. The flaw can be exploited locally without any user interaction, giving the attacker the ability to modify system configurations or execute privileged code. The primary risk is elevated security exposure for devices running the affected MediaTek chipset firmware.

The affected software is the mtee component within MediaTek, Inc. chipsets as released at the time of the advisory. The specific product name appears to be the MediaTek chipset; no further versioning detail is supplied in the CVE data.

There is no EPSS score available, and the vulnerability is not listed in the CISA KEV catalog. Because the type confusion requires an attacker already holding System privilege, the attack vector is local. The CVSS score of 6.7 indicates a moderate severity, and the potential impact of local privilege escalation warrants prompt action.