The reported flaw is an out‑of‑bounds read in the modem component of MediaTek chipsets. The lack of bounds checking can allow a remote user to trigger a denial‑of‑service condition by directing the device to a rogue base station. The vulnerability does not provide execution privileges and does not require user interaction.

The affected products are MediaTek chipsets. The advisory lists the issue under the Modem module identified by Patch ID MOLY01774038 and Issue ID MSV‑8913. Specific chipset models are not enumerated in the advisory, so any device containing the flagged modem implementation is potentially vulnerable.

The flaw carries a CVSS score of 5.3, but it is described as a remote denial‑of‑service vector that can be triggered without user interaction. No EPSS score is available and the vulnerability is not present in the CISA KEV list, indicating it has not yet been observed in the wild. An attacker could remotely force a modem reset by sending crafted management frames to a device connected to a malicious base station. Because no additional privileges are required, the risk is primarily for availability of affected devices.