CVE-2025-20762

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/January-2026	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:mediatek:mt6835:-:::::::*
	cpe:2.3:h:mediatek:mt6835t:-:::::::*
	cpe:2.3:h:mediatek:mt6878:-:::::::*
	cpe:2.3:h:mediatek:mt6878m:-:::::::*
	cpe:2.3:h:mediatek:mt6897:-:::::::*
	cpe:2.3:h:mediatek:mt6899:-:::::::*
	cpe:2.3:h:mediatek:mt6991:-:::::::*
	cpe:2.3:h:mediatek:mt8676:-:::::::*
	cpe:2.3:h:mediatek:mt8678:-:::::::*
	cpe:2.3:h:mediatek:mt8755:-:::::::*
	cpe:2.3:h:mediatek:mt8792:-:::::::*
	cpe:2.3:h:mediatek:mt8793:-:::::::*
	cpe:2.3:h:mediatek:mt8863:-:::::::*
	cpe:2.3:h:mediatek:mt8873:-:::::::*
	cpe:2.3:h:mediatek:mt8883:-:::::::*

History

No history.

Information

Published : 2026-01-06 02:15

Updated : 2026-01-08 19:25

NVD link : CVE-2025-20762

Mitre link : CVE-2025-20762

CVE.ORG link : CVE-2025-20762

JSON object : View

Products Affected

mediatek

mt8792
mt6835t
mt6897
mt8873
mt6878m
mt6878
mt8678
mt8755
mt8793
mt8863
mt6835
mt8883
mt6991
nr17
mt6899
mt8676

CWE

CWE-617

Reachable Assertion

{"id": "CVE-2025-20762", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2026-01-06T02:15:41.807", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/January-2026", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@mediatek.com", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760."}], "lastModified": "2026-01-08T19:25:45.517", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5"}, {"criteria": "cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7FE7DBA-479C-402B-8485-9D14E70F25EB"}, {"criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53"}, {"criteria": "cpe:2.3:h:mediatek:mt6878m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "483B6FB0-D683-4F3C-BA5B-6C9852179854"}, {"criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66"}, {"criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD"}, {"criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC"}, {"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78"}, {"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"}, {"criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F"}, {"criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52"}, {"criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"}, {"criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC"}, {"criteria": "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6DD525F-7050-42BD-829D-1121698B8009"}, {"criteria": "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23DD8281-FEB4-4E23-8DDA-680FF895F12E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}