The vulnerability resides in MediaTek modem firmware and allows an out‑of‑bounds write because of a missing bounds check. This flaw can elevate a user’s privileges on the device when the user’s device is connected to a rogue base station controlled by an attacker. The write does not require any additional execution privileges, but user interaction is needed for exploitation. The resulting escalation could compromise the integrity and confidentiality of the device’s operating system and any higher‑level applications running on it.

MediaTek chipsets equipped with the affected modem firmware are impacted. The precise firmware versions are not listed in the provided data; however, any device using the vulnerable MediaTek modem that can connect to a cellular network is at risk.

Because the EPSS score is not provided and the vulnerability is not listed in the CISA KEV catalog, the overall likelihood of exploitation is uncertain. The CVSS score of 7.5 indicates a high severity vulnerability. The attack requires the victim’s device to be under a rogue base station and some user interaction, suggesting a moderate to low probability in most operational environments. The potential impact is high due to privilege escalation. The vulnerability is identified as CWE-787, an out‑of‑bounds write flaw.