This vulnerability involves an out-of-bounds read (CWE-125) in the modem of MediaTek chipsets due to a missing bounds check. An attacker operating a rogue base station can exploit this flaw remotely to cause a denial of service on a user equipment (UE) device connected to the malicious base station. Exploitation does not require user interaction or elevated privileges. The affected products include specific MediaTek chipset models such as MT2735, MT6833, MT6853, and others listed. There is no CVSS score or official remediation level provided, and no known exploits in the wild have been reported.

The primary impact is a remote denial of service condition on devices using the affected MediaTek chipsets when connected to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are required for exploitation. There is no information about further impacts such as code execution or data leakage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or remediation level has been provided at this time. Users and administrators should monitor MediaTek advisories for updates and apply patches once available.