A heap buffer overflow in the Modem component of MediaTek chipsets can be triggered without any user interaction or elevated privileges, leading to a system crash that manifests as a denial of service for the connected user equipment. The vulnerability is identified as CWE-120 and requires no additional execution privileges to exploit. The explosion of the heap buffer can thus cause a full denial of service to the device.

MediaTek, Inc. produces the affected chipsets. All firmware builds that include the unpatched Modem code are potentially vulnerable, and no specific firmware or hardware version information is provided in the advisory.

The CVE is classified as a remote denial of service. Based on the description, the attack is carried out over the air by a rogue base station that the user equipment connects to, so the likely attack vector is wireless. The CVSS score of 6.5 indicates moderate severity. The EPSS score of less than 1% implies that the probability of exploitation is low. The vulnerability is not listed in the CISA KEV catalog. Even though the exploitation is remote and requires no user action, the low EPSS coupled with moderate severity means patching should be prioritized.