The flaw is an out‑of‑bounds read in a MediaTek modem caused by a missing bounds check, a classic buffer over‑read (CWE‑126). It does not grant execution privileges, but it can crash the modem, interrupting normal device operation and effectively denying service. The defect is triggered when a user equipment connects to a rogue base station, with no user interaction required.

Devices powered by MediaTek chipsets that run modem firmware containing the vulnerable code are affected. The vulnerability is identified by patch ID MOLY01774038 and issue ID MSV‑8912, though specific firmware versions are not listed. Any product that incorporates the affected modem code is vulnerable.

The CVSS score of 5.3 reflects moderate severity. EPSS information is unavailable, so the exact exploitation likelihood cannot be quantified. The vulnerability is listed in a Mediatek product‑security bulletin released in October 2026. Because the attacker can trigger the fault remotely via a rogue base station and the exploit requires no additional privileges or user interaction, the risk to devices that do not isolate against rogue cellular connections is significant, even though the precise probability of exploitation remains undefined. The advisory does not mention inclusion in the CISA KEV catalog.