This vulnerability involves an out-of-bounds write in the apusys component of MediaTek chipsets MT8196 and MT8366. It can lead to a local escalation of privilege via a confused deputy scenario, requiring the attacker to already have System privilege. Exploitation does not require user interaction. The CVSS vector indicates low attack complexity, low privileges required (high privilege), no user interaction, unchanged scope, and high impact on confidentiality and integrity, with no impact on availability. No known exploits are reported in the wild, and no patch or remediation level has been disclosed by the vendor.

An attacker with System privilege on affected MediaTek chipsets could exploit this vulnerability to escalate privileges further, potentially gaining higher control over the system. The vulnerability impacts confidentiality and integrity but does not affect availability. Since exploitation requires existing System privileges, the risk is limited to scenarios where an attacker already has significant access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity involving privilege escalation attempts. No vendor advisory or patch links are currently provided.