CVE-2025-20763

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

CVE-2025-20763

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

CVE-2025-20763

CVE-2025-20763 affects the mmdvfs component. A missing bounds check can enable an out-of-bounds write, leading to local privilege escalation if an attacker already holds System privileges. No user interaction is required. Public records across NVD/Red Hat/ENISA and other feeds confirm the issue a...

CVE-2025-20750

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20791

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2025-20791

CVE-2025-20791 describes a vulnerability in the MediaTek Modem where incorrect error handling can cause a system crash, leading to remote denial of service if a user equipment connects to a rogue base station. Exploitation requires no user interaction and is possible over the network; CVSSv3.1 me...

CVE-2025-20791

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2025-20752

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2025-20756

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2025-20756

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2025-20757

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20758

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2025-20758

CVE-2025-20758 : In MediaTek Modem components, an uncaught exception can cause a system crash, enabling remote DoS when a UE connects to a rogue base station. Exploitation requires no user interaction and can occur over the network. The issue is documented in multiple sources (e.g., Red Hat RH:CV...

CVE-2025-20759

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20759

In MediaTek Modem CVE-2025-20759, the issue is a missing bounds check causing an out-of-bounds read in the Modem component. This can enable remote denial of service when a user equipment (UE) connects to a rogue base station without requiring user interaction and with no additional privileges. Pu...

CVE-2025-20790

CVE-2025-20790 describes a vulnerability in MediaTek Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station without extra privileges and with no user interaction. The fixed patch is MOLY01677581 (MSV-4701). The ...

CVE-2025-20755

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20755

CVE-2025-20755 describes a vulnerability in MediaTek Modem components (MOLY) where improper input validation can crash the application, causing remote denial of service without user interaction if a UE connects to a rogue base station. Affected: Modem stack; Root cause: input validation flaw lead...

CVE-2025-20754

CVE-2025-20754 affects MediaTek’s Modem component. The issue is an incorrect bounds check that can cause a system crash, leading to remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and is possible remotely via a network path. The vulne...

CVE-2025-20754

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...