CVE-2025-20754

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20753

A vulnerability exists in the Modem component, specifically affecting MediaTek Chipsets , where an uncaught exception can trigger a system crash. This flaw enables a remote denial of service (DoS) attack if a user equipment (UE) connects to a rogue base station controlled by an attacker. The expl...

CVE-2025-20792

A security vulnerability exists in the Modem component (specifically in MediaTek Chipsets ) due to improper input validation . This flaw allows an attacker to trigger a system crash , potentially resulting in a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base stati...

CVE-2025-20792

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48630

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10196993 Description A memory corruption issue exists in display due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

PT-2025-48628

In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802...

PT-2025-48613

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash may occur due to an uncaught exception, potentially leading to remote denial of service. This can happen if a user equipment UE connects to a rogue base station controlled by an...

PT-2025-48612

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in Modem could lead to a system crash and remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker. No...

PT-2025-48620

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

PT-2025-48631

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4796...

PT-2025-48638

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may cause a system crash due to improper error handling. This could result in a remote denial of service if a User Equipment UE connects to a malicious base station...

PT-2025-48611

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in Modem could lead to a remote denial of service. This can occur if a user equipment UE connects to a rogue base station controlled by an attacker. No additional executi...

PT-2025-48619

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This is due to a missing bounds check, potentially resulting in an out-of-bounds read. An attacker could exploit this if a...

PT-2025-48621

In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259774; Issue ID: MSV-5029...

PT-2025-48637

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48617

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could result in a system crash because of inadequate input validation. This could lead to a remote denial of service if a User Equipment UE connects to a malicious...

PT-2025-48627

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4803...

PT-2025-48633

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184297; Issue ID: MSV-4759...

PT-2025-48634

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4752...

PT-2025-48626

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4804...