An out‑of‑bounds write was discovered in MediaTek modem firmware, allowing an attacker to corrupt memory without needing any privileges or user interaction. The flaw can cause the modem to crash, resulting in a denial‑of‑service condition for the connected user equipment.

The vulnerability affects MediaTek, Inc. chipsets used in mobile modems. No specific affected versions are listed, so all firmware versions prior to the release of patch ID MOLY01750090 may be impacted.

The exploit can be carried out remotely by an adversary controlling a rogue base station and does not require the user to take any action. Although the EPSS score is not available and the issue is not listed in the CISA KEV catalog, the lack of a user‑interaction requirement and the high potential for service disruption make it a significant threat. The CVSS score is not provided, but the described conditions suggest a high severity for affected deployments.