The vulnerability is an out‑of‑bounds write in the Modem firmware caused by a missing bounds check. An attacker can trigger this through a rogue base station, with no additional execution privileges or user interaction required. The result of a successful exploitation is a denial of service to the user equipment, disrupting normal modem operation and service availability.

The affected product is the MediaTek chipset used in Modem implementations. Specific firmware versions are not listed in the advisory. All devices running the impacted MediaTek firmware are potentially vulnerable until patched.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, but the described attack path—remote interaction via a rogue base station—indicates a practical exploitation scenario with no user interaction needed. Because the flaw causes a memory corruption that can bring the modem to a non‑operational state, the impact is significant, with a high potential to affect many devices that rely on the MediaTek chipset.