In the MediaTek mtee component, a bounds check is missing, allowing an attacker who already owns system privilege to overwrite memory and elevate privileges further. The vulnerability does not require user interaction, so an adversary with local access can trigger the exploit directly.

All MediaTek chipsets that include the mtee component are potentially affected. Version information is not specified, so any device using the current mtee implementation should be treated as at risk.

This is a local privilege escalation flaw with a CWE‑787 out‑of‑bounds write weakness. The CVSS score of 6.7 indicates a high severity level, and the EPSS score is not available while the vulnerability is not listed in the CISA KEV catalog. An attacker must have some level of local access to reach system privilege before exploitation can occur; once that is achieved the flaw can grant complete control over the device. The risk remains significant for environments where system privilege can be attained by malicious code or through other local vulnerabilities.