This vulnerability involves an out-of-bounds write (CWE-787) in the modem of MediaTek chipsets due to a missing bounds check. An attacker operating a rogue base station could exploit this flaw to remotely escalate privileges on a connected UE device, requiring user interaction but no further execution privileges. The issue is tracked under Patch ID MOLY01406170 and Issue ID MSV-4461 and affects numerous MediaTek chipset versions. As of the published date, no CVSS score or official remediation level has been provided.

Successful exploitation could lead to remote escalation of privilege on affected devices connected to a malicious base station. This could compromise device security and potentially allow unauthorized actions at a higher privilege level. However, exploitation requires user interaction and connection to a rogue base station controlled by the attacker. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should be cautious about connecting to untrusted or unknown base stations. Monitor MediaTek advisories for updates regarding patches or mitigations.