In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01516959; Issue ID: MSV-3502.
2025-09-01T06:15:34.630
2025-09-03T16:07:22.770
Analyzed
CVSSv3.1: 8.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | mediatek | nr17 | - | Yes |
| Operating System | mediatek | nr17r | - | Yes |
| Hardware | mediatek | mt6813 | - | No |
| Hardware | mediatek | mt6835 | - | No |
| Hardware | mediatek | mt6835t | - | No |
| Hardware | mediatek | mt6878 | - | No |
| Hardware | mediatek | mt6878m | - | No |
| Hardware | mediatek | mt6897 | - | No |
| Hardware | mediatek | mt6899 | - | No |
| Hardware | mediatek | mt6991 | - | No |
| Hardware | mediatek | mt8676 | - | No |
| Hardware | mediatek | mt8678 | - | No |
| Hardware | mediatek | mt8792 | - | No |
| Hardware | mediatek | mt8863 | - | No |
| Hardware | mediatek | mt8873 | - | No |
| Hardware | mediatek | mt8883 | - | No |