This vulnerability is a heap buffer overflow (CWE-122) in the Telephony component of MediaTek chipsets. It allows memory corruption that could lead to local privilege escalation if an attacker already has System privileges. The flaw does not require user interaction for exploitation. Multiple MediaTek chipset models are affected. As of the provided data, no official patch or remediation guidance has been published by MediaTek.

Successful exploitation can lead to local escalation of privilege on affected MediaTek chipsets, potentially allowing an attacker with System privileges to gain higher privileges or cause denial of service through memory corruption. The vulnerability does not allow remote exploitation or privilege escalation from lower privilege levels without prior System access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users and administrators should monitor MediaTek advisories for updates. No specific mitigations are indicated in the available data.