MediaTek Modem firmware contains an out‑of‑bounds write caused by improper input validation. The bug can be abused to elevate privileges on the unit without any user interaction. An attacker only needs to entice the user equipment to connect to a rogue base station under the attacker’s control, and the elevated privileges are gained directly from the modem component.

The vulnerability applies to all devices that include MediaTek chipset Modem firmware. No firmware or OS version is specified in the advisory, so any device running the default or unpatched Modem module is potentially affected.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, so the likelihood of exploitation is unknown. Nevertheless, remote privilege escalation represents a high‑impact condition. Exploitation requires only the presence of a manipulated base station; no extra execution privileges or user interaction are needed, which makes the attack vector readily exploitable for a determined adversary.