CVE-2025-20765

In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833...

CVE-2025-20764

In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259774; Issue ID: MSV-5029...

CVE-2025-20763

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

CVE-2025-20763

The mmdvfs component in MediaTek Chipsets is vulnerable to an out-of-bounds write caused by a missing bounds check . This flaw could allow a malicious actor who has already obtained System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remedia...

CVE-2025-20763

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

CVE-2025-20750

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20791

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2025-20791

A security vulnerability exists in the Modem component of MediaTek Chipsets due to incorrect error handling . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . The attack can be triggered if a User Equipment (UE) connects to a rogue base station controlled by ...

CVE-2025-20791

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2025-20752

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2025-20756

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2025-20756

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2025-20757

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20758

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2025-20758

A security vulnerability exists in MediaTek Chipsets within the Modem component. The issue is caused by an uncaught exception that can trigger a system crash, leading to a remote denial of service (DoS) . This attack can be executed if a User Equipment (UE) connects to a rogue base station contro...

CVE-2025-20759

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20759

A security vulnerability exists in the Modem component (specifically identified in MediaTek Chipsets ) due to a missing bounds check . This flaw allows for an out-of-bounds read , which can be leveraged to trigger a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) con...

CVE-2025-20790

A security vulnerability exists in MediaTek Chipsets (Modem component) due to improper input validation . This flaw can lead to a system crash and a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileg...

CVE-2025-20755

A vulnerability exists in the Modem component of MediaTek Chipsets due to improper input validation . This flaw can lead to a remote denial of service (DoS) , causing an application crash if a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution ...

CVE-2025-20755

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...