An integer overflow in the Modem component of MediaTek chipsets can overwrite memory outside the intended bounds, a classic out‑of‑bounds write identified as CWE‑787. This flaw can be exploited to gain elevated privileges on the user equipment without requiring any user interaction, allowing an attacker who controls a rogue base station to force the device to perform actions beyond its normal rights.

The vulnerability affects all MediaTek modem chipsets shipped with the Modem firmware, as identified by MediaTek as the vendor product. No specific version range is listed in the advisory, so any firmware running the susceptible Modem implementation is potentially impacted.

The bug can be triggered remotely by a rogue base station that the UE connects to; no local privileges or user cooperation are necessary. Although the CVSS score is not stated and the EPSS is unavailable, the lack of user interaction combined with the privilege escalation impact places this issue in a high risk category. MediaTek has not listed it in the CISA KEV catalog, but the potential for widespread exploitation via cellular networks warrants prompt action.