MediaTek Modem Out-of-Bounds Read Vulnerability Leading to Remote Denial-of-Service

Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the MediaTek Modem. This issue arises from an incorrect bounds check, which could lead to remote denial-of-service. The vulnerability is exploitable when a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges are required for exploitation, and user interaction is not needed.

Impact

Exploitation of this vulnerability can cause remote denial-of-service, disrupting the normal functioning of the affected device.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available through MediaTek's official channels.

Added: Sep 1, 2025, 6:30 AM
Updated: Sep 1, 2025, 6:30 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.7
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.