CVE-2025-20708

🗓️ 01 Sep 2025 05:12:16Reported by MediaTekType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 23 Views

Modem out of bounds write due to faulty bounds check enabling remote privilege escalation via rogue base station.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-20708	1 Sep 202505:12	–	attackerkb
Circl	CVE-2025-20708	1 Sep 202507:32	–	circl
CNNVD	MediaTek Modem 缓冲区错误漏洞	1 Sep 202500:00	–	cnnvd
Cvelist	CVE-2025-20708	1 Sep 202505:12	–	cvelist
EUVD	EUVD-2025-26485	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	4 Sep 202508:15	–	ncsc
NVD	CVE-2025-20708	1 Sep 202506:15	–	nvd
OSV	ASB-A-429908202	1 Sep 202500:00	–	osv
Positive Technologies	PT-2025-35454	1 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20708	3 Sep 202505:34	–	redhatcve

NVD

Node

mediatek nr15Match-

mediatek nr16Match-

mediatek nr17Match-

mediatek nr17rMatch-

AND

mediatek mt2735Match-

mediatek mt2737Match-

mediatek mt6813Match-

mediatek mt6815Match-

mediatek mt6833Match-

mediatek mt6833pMatch-

mediatek mt6835Match-

mediatek mt6835tMatch-

mediatek mt6853Match-

mediatek mt6853tMatch-

mediatek mt6855Match-

mediatek mt6855tMatch-

mediatek mt6873Match-

mediatek mt6875Match-

mediatek mt6875tMatch-

mediatek mt6877Match-

mediatek mt6877tMatch-

mediatek mt6877ttMatch-

mediatek mt6878Match-

mediatek mt6878mMatch-

mediatek mt6879Match-

mediatek mt6880Match-

mediatek mt6883Match-

mediatek mt6885Match-

mediatek mt6886Match-

mediatek mt6889Match-

mediatek mt6890Match-

mediatek mt6891Match-

mediatek mt6893Match-

mediatek mt6895Match-

mediatek mt6895ttMatch-

mediatek mt6896Match-

mediatek mt6897Match-

mediatek mt6899Match-

mediatek mt6980Match-

mediatek mt6980dMatch-

mediatek mt6983Match-

mediatek mt6983tMatch-

mediatek mt6985Match-

mediatek mt6985tMatch-

mediatek mt6989Match-

mediatek mt6989tMatch-

mediatek mt6990Match-

mediatek mt6991Match-

mediatek mt8673Match-

mediatek mt8675Match-

mediatek mt8676Match-

mediatek mt8678Match-

mediatek mt8771Match-

mediatek mt8791Match-

mediatek mt8791tMatch-

mediatek mt8792Match-

mediatek mt8795tMatch-

mediatek mt8797Match-

mediatek mt8798Match-

mediatek mt8863Match-

mediatek mt8873Match-

mediatek mt8883Match-

mediatek mt8893Match-

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT2735, MT2737, MT6813, MT6815, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8771, MT8791, MT8791T, MT8792, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893",
    "versions": [
      {
        "version": "Modem NR15, NR16, NR17, NR17R",
        "status": "affected"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/September-2025

17 Feb 2026 15:16Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8

EPSS0.00155

SSVC

CWE-787