The vulnerability is an out‑of‑bounds write in the modem due to a missing bounds check in a MediaTek chipset. This flaw permits a rogue base station attacker to gain elevated privileges on any connected user equipment, without requiring user interaction. The exploit would enable remote escalation of privilege that could provide full control of the device’s software.

The affected system is the MediaTek modem chipset found in user equipment that connects to cellular networks. No specific firmware or hardware version numbers are supplied, so any MediaTek chipset using the vulnerable modem implementation is potentially impacted. The vendor has released two patch identifiers, MOLY01879158 and MOLY01774038, referencing the fix.

The exploit can be carried out remotely by having the victim use a rogue base station under the attacker’s control. No additional privileges are required beyond the normal user conditions, making the attack straightforward. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, but the high impact of privilege escalation and lack of user interaction suggest a serious risk.