MediaTek Modem Null Pointer Dereference Vulnerability Leading to Remote Denial-of-Service

A null pointer dereference vulnerability has been identified in the MediaTek Modem, specifically in chipsets MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8791T, MT8797. This vulnerability arises from improper input validation, which can lead to a system crash. The issue could be exploited remotely if a user equipment (UE) is connected to a rogue base station controlled by an attacker. Notably, no additional execution privileges are required for exploitation, and user interaction is not needed.

Impact

Exploitation of this vulnerability can cause a system crash, leading to a denial-of-service condition on the affected device.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. The patch ID is MOLY01677581.