CVE-2025-20790

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01677581; Issue ID: MSV-4701.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
MediaTek, Inc.	MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T,	Modem NR15

References

https://corp.mediatek.com/product-security-bulletin/December-2025Vendor Advisory

Timeline

Published: Dec 2, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-207916.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connect CVE-2025-207925.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connec CVE-2025-207936.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connect CVE-2025-207946.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connec CVE-2025-207957.8In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a CVE-2025-207967.8In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a m CVE-2025-207977.8In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal CVE-2025-207987.8In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal CVE-2025-207997.8In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor CVE-2025-20809.3Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management servi CVE-2025-208007.8In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal CVE-2025-208017.0In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious ac