This vulnerability is a time-of-check to time-of-use (TOCTOU) race condition in the display functionality of MediaTek chipsets. It allows a local attacker with existing System privileges to escalate their privileges further due to a race condition flaw. The vulnerability affects specific MediaTek chipset models listed explicitly. There is no CVSS score or detailed vendor remediation guidance available at this time.

An attacker who has already obtained System privilege on an affected MediaTek chipset could exploit this race condition to escalate their privileges further. This could potentially allow the attacker to perform actions beyond their initial privilege level. No remote or user-interaction exploitation is required, limiting the attack vector to local threat actors with System access. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published. Until a patch is available, limit local System access to trusted users only to reduce risk.