This vulnerability is an out‑of‑bounds read caused by an incorrect bounds check in MediaTek modem firmware, identified as CWE‑125. The flaw can be triggered by traffic from a rogue base station without requiring elevated privileges or user interaction, and when leveraged it crashes the modem, rendering the device inoperable and producing a remote denial of service.

All MediaTek chipsets that contain the affected modem firmware are impacted. The public advisory does not list specific firmware versions, so any user equipment that relies on a MediaTek Modem component could be vulnerable. Devices communicating with a rogue base station capable of sending malformed packets that exploit the read bug fall into this category. A fix is available under patch ID MOLY01797547.

No EPSS score is available and the vulnerability was not listed in the CISA KEV catalog, so the precise exploitation likelihood remains unknown. The CVSS score for this vulnerability is 5.3. The flaw can be accessed remotely by a rogue base station, and no code execution or privileged access is needed, making it an attractive target for denial‑of‑service attacks. If an attacker can communicate with a device using the affected MediaTek modem, the vulnerability can be abused to crash the modem, resulting in a device‑wide service interruption.