A vulnerability in a modem component allows a possible out-of-bounds write due to a missing bounds check. This flaw could enable remote escalation of privilege if a user equipment (UE) connects to a malicious base station controlled by an attacker. Exploitation does not require additional execution privileges or user interaction. A patch has been identified (Patch ID: MOLY01857954), but no public exploit or detailed CVSS score is available.