The vulnerability is an out‑of‑bounds read caused by a missing permission check in MediaTek modem firmware. A user equipment device that connects to an attacker‑controlled rogue base station can trigger the failure, which drops the device from service. The flaw requires no user interaction or additional execution privileges, so it can be exploited remotely.

MediaTek chipset modems are affected. The vulnerability applies to any MediaTek modem firmware that contains the vulnerable code – specific version information is not available in the advisory, so all devices running the affected MediaTek chipset should be considered at risk.

The EPSS score is not available and the vulnerability is not listed in CISA’s Known Exploited Vulnerabilities catalog, so the current exploitation probability cannot be quantified. The CVSS score is 5.3, indicating moderate overall risk. Nevertheless, the flaw allows a remote adversary to cause denial of service simply by having the user equipment connect to a rogue base station. Because no explicit user action is required and no elevated privileges are needed, an attacker with the ability to operate a base station has a straightforward attack vector.