Based on the description, it is inferred that the attack vector requires local access to the device with no additional user interaction. A logic error in the modem component of MediaTek chipsets can lead to local information disclosure. The flaw allows an attacker who already has local access to the device to read sensitive data without requiring additional execution privileges. No user interaction is needed for exploitation, and the weakness corresponds to CWE-215, indicating that data tampering or improper handling occurs in the logic flow.

The vulnerability affects MediaTek chipsets, specifically in the modem subsystem. No explicit version range is provided; any device running the affected MediaTek firmware may be impacted.

Because the EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, the overall exploitation probability is unclear. However, the CVSS score of 5.5 indicates a medium severity. The local nature of the attack limits the impact to devices that can be physically or otherwise locally accessed, but the lack of privilege escalation requirements means any local user can potentially obtain confidential information.