CVE-2025-20678

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-674

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-20685.0An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a locCVE-2025-206809.8In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilCVE-2025-206819.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206829.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206839.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206849.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-206858.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cCVE-2025-206868.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) cCVE-2025-206875.5In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service witCVE-2025-206885.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-206895.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure CVE-2025-20695.0A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a lo
CVE-2025-20678: Medium severity, CVSS 6.5 | Vulnix