MediaTek Modem Logic Error Vulnerability Leading to Remote Denial-of-Service

A logic error in the modem component of certain MediaTek chipsets can cause a system crash, potentially leading to a remote denial-of-service condition. This vulnerability occurs when a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges are required, and user interaction is not needed for exploitation.

Impact

Exploitation of this vulnerability can cause a system crash, leading to a denial-of-service condition where the device becomes unresponsive or unavailable.

Remediation

MediaTek has issued a patch for this vulnerability, identified by Patch ID MOLY01106496. Device OEMs can contact their MediaTek representative for further information.