A flaw in the modem causes an out‑of‑bounds write because an array bound is not validated correctly. The defect can be triggered when a user equipment (UE) connects to a rogue base station under the attacker's control. No privileged code execution or user interaction is required; the attacker simply needs to lure the UE to exploit the flaw, resulting in a remote denial of service. The weakness is classified as CWE‑787: Out‑of‑Bounds Write.

The vulnerability affects MediaTek chipsets that incorporate a modem processing unit. No specific firmware revisions are listed, but the vendor issued a patch identified as MOLY01777997 to address the issue.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score is unavailable and the flaw is not listed in CISA’s KEV catalog. Nevertheless, the attack vector is remote, requires only the ability to advertise a rogue base station, and does not depend on user action. Because the flaw can crash the modem, an attacker can disrupt communications for all UEs that connect to the compromised network, yielding a high‑impact denial of service. The lack of an EPSS rating suggests the probability of exploitation is currently unknown, but the vulnerability’s remote nature and lack of prerequisites elevate its risk.