A bounds‑checking flaw exists in the firmware that controls the MediaTek modem component. When the modem receives a maliciously crafted message, the firmware can overflow a buffer, causing the entire device to crash. The result is an availability loss that can be triggered remotely, without requiring the device owner to interact or the attacker to have elevated privileges. The flaw maps to CWE‑129, a missing bounds check that allows buffer overrun.

The vulnerability impacts MediaTek, Inc. chipsets that include the modem subsystem. No specific software version numbers are listed, but the issue is tied to patch IDs MOLY01864925 and MOLY01210562 and the issue ID MSV‑8303. Devices that run firmware incorporating the affected modem should be reviewed for the presence of the pending update.

An attacker controlling a rogue base station can send specially crafted packets that exploit the bounds‑check failure, forcing the device to reboot or become unresponsive. The CVSS score of 5.3 reflects moderate impact on availability. The EPSS data is unavailable, and the flaw is not listed in the CISA KEV catalog, which indicates no recorded exploitation to date. However, because no additional conditions or privileges are needed, the threat remains significant for any device that can establish a cellular connection with a compromised base station.