This vulnerability involves an out-of-bounds write (CWE-787) in the wifi functionality of specific MediaTek chipsets (MT6890, MT6988, MT6990). The issue is due to a missing bounds check, which may allow a local attacker who already has System privileges to write outside intended memory bounds, potentially causing a denial of service condition. Exploitation does not require user interaction. The vulnerability was published on August 3, 2026, but no CVSS score or remediation level has been assigned, and no patch links are available.

A local attacker with System privileges can exploit this vulnerability to cause a denial of service by triggering an out-of-bounds write in the wifi component of affected MediaTek chipsets. There is no indication of privilege escalation or remote exploitation without prior elevated access. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor MediaTek advisories for updates. No specific mitigations are indicated at this time.