CVE-2025-20659 | ByteOS Network

Vulnerability Details :

CVE-2025-20659

Assigner-MediaTek

Assigner Org ID-ee979b05-11f8-4f25-a7e0-a1fa9c190374

Published At-07 Apr, 2025 | 03:14

Updated At-07 Apr, 2025 | 14:18

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:MediaTek

Assigner Org ID:ee979b05-11f8-4f25-a7e0-a1fa9c190374

Published At:07 Apr, 2025 | 03:14

Updated At:07 Apr, 2025 | 14:18

▼CVE Numbering Authority (CNA)

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.

Affected Products

Vendor

Product

MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8796, MT8797, MT8798, MT8863

Versions

Affected

Modem LR12A, LR13, NR15, NR16, NR17, NR17R

Problem Types

Type	CWE ID	Description
CWE	CWE-125	CWE-125 Out-of-bounds Read

Type: CWE

CWE ID: CWE-125

Description: CWE-125 Out-of-bounds Read

References

Hyperlink	Resource
https://corp.mediatek.com/product-security-bulletin/April-2025	N/A

Hyperlink: https://corp.mediatek.com/product-security-bulletin/April-2025

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:security@mediatek.com

Published At:07 Apr, 2025 | 04:15

Updated At:11 Apr, 2025 | 13:06

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CPE Matches

>>mt2735_firmware>>-

cpe:2.3:o:mediatek:mt2735_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*

>>mt2737_firmware>>-

cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*

>>mt6739_firmware>>-

cpe:2.3:o:mediatek:mt6739_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*

>>mt6761_firmware>>-

cpe:2.3:o:mediatek:mt6761_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*

>>mt6762_firmware>>-

cpe:2.3:o:mediatek:mt6762_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6762:-:*:*:*:*:*:*:*

>>mt6762d_firmware>>-

cpe:2.3:o:mediatek:mt6762d_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6762d:-:*:*:*:*:*:*:*

>>mt6762m_firmware>>-

cpe:2.3:o:mediatek:mt6762m_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6762m:-:*:*:*:*:*:*:*

>>mt6763_firmware>>-

cpe:2.3:o:mediatek:mt6763_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*

>>mt6765_firmware>>-

cpe:2.3:o:mediatek:mt6765_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*

>>mt6765t_firmware>>-

cpe:2.3:o:mediatek:mt6765t_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6765t:-:*:*:*:*:*:*:*

>>mt6767_firmware>>-

cpe:2.3:o:mediatek:mt6767_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6767:-:*:*:*:*:*:*:*

>>mt6768_firmware>>-

cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*

>>mt6769_firmware>>-

cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*

>>mt6769k_firmware>>-

cpe:2.3:o:mediatek:mt6769k_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6769k:-:*:*:*:*:*:*:*

>>mt6769s_firmware>>-

cpe:2.3:o:mediatek:mt6769s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6769s:-:*:*:*:*:*:*:*

>>mt6769t_firmware>>-

cpe:2.3:o:mediatek:mt6769t_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6769t:-:*:*:*:*:*:*:*

>>mt6769z_firmware>>-

cpe:2.3:o:mediatek:mt6769z_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6769z:-:*:*:*:*:*:*:*

>>mt6771_firmware>>-

cpe:2.3:o:mediatek:mt6771_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*

>>mt6779_firmware>>-

cpe:2.3:o:mediatek:mt6779_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6779:-:*:*:*:*:*:*:*

>>mt6781_firmware>>-

cpe:2.3:o:mediatek:mt6781_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*

>>mt6783_firmware>>-

cpe:2.3:o:mediatek:mt6783_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6783:-:*:*:*:*:*:*:*

>>mt6785_firmware>>-

cpe:2.3:o:mediatek:mt6785_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*

>>mt6785t_firmware>>-

cpe:2.3:o:mediatek:mt6785t_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6785t:-:*:*:*:*:*:*:*

>>mt6785u_firmware>>-

cpe:2.3:o:mediatek:mt6785u_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6785u:-:*:*:*:*:*:*:*

>>mt6789_firmware>>-

cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Secondary	security@mediatek.com
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Secondary

Source: security@mediatek.com

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://corp.mediatek.com/product-security-bulletin/April-2025	security@mediatek.com	Vendor Advisory

Hyperlink: https://corp.mediatek.com/product-security-bulletin/April-2025

Source: security@mediatek.com

Resource:

Vendor Advisory