A permissions bypass within the MediaTek Modem component allows a local attacker who already holds System privilege to elevate their privileges further. The flaw is rooted in improper permission validation, as captured by CWE-732. Because user interaction is not required, any local process that has gained a foothold and achieved System privilege can exploit the bypass to obtain higher-level authority and potentially complete control over the device.

The vulnerability affects MediaTek, Inc. chipsets. Specific firmware or hardware revisions are not listed in the advisory, but the patch IDs ALPS09608864 and ALPS09327759 target the affected Modem component across the MediaTek product family.

The attack vector is local, with no need for external access or user cooperation. Although the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the potential for full privilege escalation remains significant once System privilege is attained. Adopting the disclosed patch mitigates the risk by removing the permissions bypass that underlies the escalation.