A critical out of bounds write vulnerability in MediaTek chipsets enables remote privilege escalation for attackers controlling a rogue base station.

This vulnerability is a CWE-787 out of bounds write flaw occurring within the modem firmware. It can be triggered by an unauthenticated attacker who successfully lures a user to connect to a rogue base station.

The exploitation of this vulnerability poses a significant risk to mobile device security, potentially granting an attacker full control over the affected hardware. Given the CVSS score of 7.5, this high severity flaw facilitates remote privilege escalation, which could lead to total compromise of device integrity and user data confidentiality. Organizations utilizing devices with these chipsets face elevated risks of corporate espionage or unauthorized access to sensitive communications.

Immediate Action: Apply the vendor-provided security update identified by Patch ID MOLY00782946 as soon as it is released by your device manufacturer.

Proactive Monitoring: Monitor device connection logs for unusual base station handovers or unexpected modem behavior that might indicate an attempt to connect to unauthorized cellular infrastructure.

Compensating Controls: Advise users to disable automatic network selection in environments where potential rogue base stations are a documented threat, and ensure devices are kept in updated, secure states.

Public Exploit Available: No — there is no confirmed public exploit available.

The severity of this vulnerability necessitates immediate attention, particularly for enterprise mobile fleets. Security teams should prioritize identifying devices using the affected MediaTek chipsets and verify that firmware updates are applied immediately upon release by the device OEM to mitigate the risk of remote privilege escalation.