This vulnerability (CVE-2026-20471) involves an out-of-bounds write in MediaTek chipsets due to a missing bounds check in the DA component. Exploitation requires physical access but no additional execution privileges or user interaction. The flaw can cause a local denial of service condition. Affected chipsets include MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. Patch identifiers ALPS10991588 and AUTO00851171 are referenced for certain chipset models, but no explicit patch availability or remediation level is confirmed. The CVSS 3.1 vector indicates low attack complexity, no privileges required, no user interaction, and impact limited to availability.

The vulnerability allows an attacker with physical access to cause a denial of service on affected MediaTek chipsets by triggering an out-of-bounds write. There is no impact on confidentiality or integrity, and no remote exploitation or user interaction is required. The denial of service is local and requires physical device access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The referenced patch IDs (ALPS10991588 and AUTO00851171) suggest fixes may exist for some chipset models, but no official fix or remediation level is confirmed in the provided data. Until official patches are available, restrict physical access to affected devices to mitigate risk.