Skip to main content
← Vulnerabilities

In Modem, there is a possible system crash due to a missing bounds check.

Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.

7.1HighCISA-ADP
Exploited
No known exploitation
Fix
No fix listed
Who is exposed
Not reported
Published
Last modified
Published
Not listed in CISA KEV
13/100 · provisional
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

The Modem component in affected mobile device software can crash due to a missing bounds check. If a device connects to a rogue base station controlled by an attacker, this could potentially allow escalation of privilege, and user interaction is required.

Read the original description

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01911177; Issue ID: MSV-10122.

Timeline

  1. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  2. CVE published
  3. First seen by cve.now1 day
  4. Record last updated

Affected versions

  • MediaTek, Inc. MediaTek chipset

    MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, and 47 more

Evidence 1

  1. Link

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.