A missing bounds check in MediaTek modem firmware can cause an out-of-bounds write, allowing an attacker to corrupt critical memory. This flaw can be leveraged by a rogue base station to achieve privilege escalation on the user equipment without any user interaction or additional execution privileges. The result is elevated privileges that could grant an attacker full control over the device.

The vulnerability affects MediaTek chipsets that include the modem component. No specific firmware version is listed, but any device running the affected modem code is potentially impacted.

The flaw enables remote exploitation; no user action is required. While EPSS data is unavailable and the issue is not in the CISA KEV catalog, the ability to remotely elevate privileges indicates a high severity risk. Attackers can exploit the vulnerability from a rogue base station that a user equipment connects to during normal operation.