CVE-2025-20754

CVE-2025-20754

Vendor Mediatek, Inc.

Product MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT68

Weakness CWE-248

Published December 2, 2025

Last update December 2, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689251; Issue ID: MSV-4840.

Key dates

02Disclosure timeline

December 2, 2025 CVE published

December 2, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-20754 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/248.html

Related vulnerabilities

Identifiers

CVE CVE-2025-20754

CWE CWE-248

Affected versions

Vendor Mediatek, Inc.

Affected Modem NR15, NR16, NR17, NR17R

01Description

02Disclosure timeline

03References

04Related CVE