This vulnerability (CVE-2026-20471) involves an out-of-bounds write in the MediaTek chipset due to a missing bounds check in the DA component. Exploitation requires physical access but no elevated privileges or user interaction. The affected chipsets are MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. Patch identifiers ALPS10991588 and AUTO00851171 are referenced for certain chipset models, but no explicit patch availability or remediation level is confirmed in the advisory data.

An attacker with physical access to a vulnerable device can exploit this out-of-bounds write to cause a local denial of service. No additional privileges or user interaction are needed, which lowers the barrier for exploitation in physical attack scenarios. There is no indication of remote exploitation or code execution impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The advisory references patch IDs ALPS10991588 and AUTO00851171 for some affected chipsets, suggesting patches may exist. Until official patches are confirmed and applied, restrict physical access to vulnerable devices to mitigate risk.