Skip to main content
← Vulnerabilities

In Modem, there is a possible out of bounds write due to a missing bounds check.

Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.

5.3MediumCISA-ADP
Exploited
No known exploitation
Fix
No fix listed
Who is exposed
Not reported
Published
Last modified
Published
Not listed in CISA KEV
10/100 · provisional
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

The Modem component (cellular baseband firmware) in affected devices contains a flaw that could let an attacker crash or disrupt the modem. An attacker operating a rogue base station could cause a remote denial of service on a device that connects to it, without user interaction.

Read the original description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775984; Issue ID: MSV-8907.

Timeline

  1. CVE published
  2. First seen by cve.now
  3. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  4. Record last updated

Affected versions

  • MediaTek, Inc. MediaTek chipset

    MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, and 47 more

Evidence 1

  1. Link

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.