An uncaught exception within the MediaTek modem stack can trigger a system crash, resulting in a remote denial of service. The flaw maps to unchecked throw logic and resource availability weaknesses, allowing an attacker to cause instability without special privileges or user interaction. The malicious action involves the modem encountering faulty exception handling code during normal operation.

The vulnerability affects a range of MediaTek chipsets, including models MT2735, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791t, MT8797, as well as the NR15 network radio firmware.

The CVSS score of 6.5 indicates a medium‑to‑high impact level, while the EPSS indicates that exploitation probability remains below 1%. The vulnerability is not listed in the CISA KEV catalog and has no documented public exploits. Attackers can achieve disruption by luring user equipment into connecting to a rogue base station; once the device’s modem processes the faulty code, the entire system crashes, severing connectivity for the affected user and potentially impacting a broader user base in the coverage area.