The vulnerability is an out-of-bounds write in the modem module caused by an incorrect bounds check. This flaw can overwrite adjacent memory and result in elevated privileges on the device. The weakness is classified as CWE‑787, which typically permits uncontrolled memory overwrites that lead to privilege escalation.

The affected products are MediaTek, Inc. chipset devices. Specific firmware versions are not listed, so all current MediaTek chipsets that incorporate the vulnerable modem firmware are potentially impacted.

The flaw can be triggered when a user equipment connects to a rogue base station controlled by the attacker, with no user interaction required. No EPSS score is available and the vulnerability is not listed in CISA KEV, but the remote escalation of privileges implies a high CVSS score. An attacker who can set up or hijack a base station can exploit this weakness to gain elevated privileges on the device.