Mediatek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, M vulnerabilities

CVE-2025-20792 Medium · 5.3 CWE-617 Dec 2, 2025

In Modem, there is a possible system crash due to improper input validation. This could lead to...

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01717526; Issue ID: MSV-5591.

CVE-2025-20791 Medium · 6.5 CWE-617 Dec 2, 2025

In Modem, there is a possible system crash due to incorrect error handling. This could…

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01661189; Issue ID: MSV-4298.

CVE-2025-20790 Medium · 5.3 CWE-476 Dec 2, 2025

NULL Pointer Dereference in Mediatek Nr15

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01677581; Issue ID: MSV-4701.

CVE-2025-20757 Medium · 6.5 CWE-617 Dec 2, 2025

In Modem, there is a possible system crash due to improper input validation. This could…

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673751; Issue ID: MSV-4644.

CVE-2025-20756 Medium · 6.5 CWE-1287 Dec 2, 2025

In Modem, there is a possible system crash due to a logic error. This could lead to…

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673749; Issue ID: MSV-4643.

CVE-2025-20755 Medium · 5.3 CWE-476 Dec 2, 2025

NULL Pointer Dereference in Mediatek Nr15

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00628396; Issue ID: MSV-4775.

CVE-2025-20751 Medium · 6.5 CWE-787 Dec 2, 2025

Out-of-bounds Write in Mediatek Nr15

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01661195; Issue ID: MSV-4297.

CVE-2025-20750 Medium · 6.5 CWE-476 Dec 2, 2025

NULL Pointer Dereference in Mediatek Nr15

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01661199; Issue ID: MSV-4296.