This vulnerability involves a heap buffer overflow in the Audio HAL of MediaTek chipsets, leading to an out-of-bounds write (CWE-787). It allows a local attacker with user execution privileges to cause a denial of service. Exploitation does not require user interaction. The issue is tracked under Patch IDs ALPS10981454 and AUTO00851293 for different chipset models. No CVSS score or remediation level has been published, and no known exploits are reported in the wild.

Successful exploitation can cause a local denial of service on affected MediaTek chipsets by corrupting memory via an out-of-bounds write in the Audio HAL. This requires local user execution privileges but no additional user interaction. There is no indication of privilege escalation or remote exploitation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Monitor MediaTek's official channels for updates regarding Patch IDs ALPS10981454 and AUTO00851293. Until a patch is released, limit local user access to trusted parties to reduce risk.