A missing bounds check in the MediaTek Modem firmware allows an out of bounds write that can elevate privileges on the device. The flaw does not require any additional execution privileges; a rogue base station can trigger the write when a user equipment (UE) connects, and no user interaction is needed. The result is that the attacker can raise his privileges within the device.

The vulnerability affects all devices that incorporate MediaTek chipsets with the Modem component. Vendor impact is limited to MediaTek, Inc., and affected products include any consumer or enterprise device that uses the affected modem firmware. No specific model or firmware versions are listed, but the problem exists before the release of the patches identified by MOLY01874018 and MOLY01774038.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, so the current exploitation probability is unknown. Because the flaw can be triggered remotely through a rogue base station without user interaction, the risk to a device that connects to untrusted networks is high. The lack of an explicit CVSS score makes precise severity judgment difficult, yet the potential for a complete privilege escalation indicates a likely high to critical impact if an attacker can control the base station or supply a malicious signal to the device.