The vulnerability occurs in the Mediatek AV1 video codec driver when setting up tile slices. An unbounded copy of tile column and row start information from the bitstream into internal arrays may overflow the buffer. This can corrupt kernel memory and potentially allow a malicious actor to gain elevated privileges or crash the system, depending on how the overflow propagates. The flaw is tied to improper validation of the tile information supplied by the media file.

The affected products are Linux kernels incorporating the Mediatek media codec. Any distribution that includes the mediatek vcodec driver compiled into the kernel, such as standard Linux kernels from official repositories, is susceptible. No specific vendor or version list is given, but the issue applies to all builds prior to the fix.

The CVSS score is 7.8, the EPSS score is unavailable; the vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local, requiring control over media decoding in the kernel. If an attacker can supply a crafted AV1 bitstream to the driver, the overflow may be triggered, leading to memory corruption. The exact exploitability depends on additional context and the moderate CVSS score suggests that while exploitation is feasible, immediate risk warrants timely patching.