A vulnerability in the MediaTek modem firmware allows for out-of-bounds read operations, which may cause system crashes or data exposure.

This is an out-of-bounds read (CWE-125) occurring in the modem component due to a missing bounds check. An attacker can exploit this condition to trigger memory access errors, which can result in denial-of-service or potentially the disclosure of sensitive memory contents.

The modem is a critical component for mobile device connectivity and security. An out-of-bounds read can lead to device instability, causing service disruption, or potentially expose sensitive information processed by the modem firmware. With a CVSS score of 7.5, this vulnerability poses a significant risk to the reliability and security of mobile devices utilizing the affected chipsets.

Immediate Action: Apply the latest security updates provided by the device manufacturer or the mobile service provider to patch the modem firmware.

Proactive Monitoring: Monitor device performance for unexplained reboots, modem crashes, or anomalous network behavior that could indicate exploitation attempts.

Compensating Controls: Keep device firmware updated and avoid connecting to untrusted or suspicious cellular networks where possible, as modem-level vulnerabilities are often triggered over-the-air.

Public Exploit Available: Unknown.

Users and administrators of devices containing the affected MediaTek chipsets must ensure that all official security patches are applied as soon as they are made available by the vendor. Prioritize updates to maintain system stability and prevent potential memory-based attacks against the modem firmware.