Improper input validation in the modem firmware of MediaTek chipsets allows an attacker to send crafted packets from a rogue base station that can trigger a crash of the modem, resulting in a denial of service. No user interaction or additional execution privileges are required for exploitation.

MediaTek chipsets – no specific product or version information is disclosed by the advisory.

The CVSS score is not provided, and the EPSS score is unavailable. The vulnerability is not listed in the CISA KEV catalog. Exploitation can be performed remotely through a rogue base station without user interaction, and the crash can interrupt connectivity and disrupt service. In the absence of local privilege requirements and with the potential to affect all device users, the risk is considered significant for deployments using MediaTek chipsets.