The vulnerability is an out‑of‑bounds read in the ip_stack module caused by improper input validation. An attacker can exploit it by connecting a user equipment to a rogue base station under the attacker's control. No additional privileges are required and the victim does not need to take any action. Exploitation results in a remote denial of service of the device’s communication capabilities.

All MediaTek chipsets that run the affected ip_stack implementation are impacted. The vendor issue ID is MSV‑5152 and the patch release is identified as MOLY01387180.

Because the exploit can be carried out remotely over the air interface without user interaction, the risk is high. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, but the potential for widespread denial of service makes it a serious threat. Attackers would position a rogue base station to trigger the out‑of‑bounds read, leading to crash or loss of service for connected user equipment.