This vulnerability involves an out-of-bounds write in the secure boot process of MediaTek chipsets due to an integer overflow condition. The flaw affects the MT6813 chipset and can be exploited locally by an attacker with user privileges to cause a denial of service. No user interaction is needed for exploitation. The CVSS score is 4.3 (medium severity), reflecting the requirement for local access and limited impact to availability only. There is a patch identified by MediaTek (ALPS09963054), but no explicit confirmation of its availability or deployment is provided in the vendor data.

Successful exploitation results in a local denial of service condition, potentially crashing the device. There is no impact on confidentiality or integrity according to the CVSS vector. The attacker must have physical or local access with user privileges. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since a patch ID is referenced, users should monitor MediaTek advisories for the official fix and apply it once available. Until patched, restrict physical and local user access to affected devices to mitigate risk.