CVE-2025-20790

CVE-2025-20790 describes a vulnerability in MediaTek Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station without extra privileges and with no user interaction. The fixed patch is MOLY01677581 (MSV-4701). The ...

CVE-2025-20755

CVE-2025-20755 describes a vulnerability in MediaTek Modem components (MOLY) where improper input validation can crash the application, causing remote denial of service without user interaction if a UE connects to a rogue base station. Affected: Modem stack; Root cause: input validation flaw lead...

CVE-2025-20755

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20754

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20753

CVE-2025-20753 affects MediaTek Modem: an uncaught exception in the Modem can cause a system crash, enabling remote DoS if a UE connects to a rogue base station; no user interaction required. Patch MOLY01689252 (MSV-4841) is referenced as the fix. The CVSS vector in the initial record indicates n...

CVE-2025-20792

The CVE-2025-20792 issue affects MediaTek Modem components (e.g., Modem) and stems from improper input validation that can crash the system, enabling remote denial of service when a UE connects to a rogue base station. No user interaction is required; exploitation is possible over the network wit...

CVE-2025-20792

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48610

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker can exploit this by having a...

PT-2025-48626

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4804...

PT-2025-48611

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A missing bounds check in Modem could lead to a remote denial of service. This can occur if a user equipment UE connects to a rogue base station controlled by an attacker. No additional executi...

PT-2025-48634

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4752...

PT-2025-48637

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48632

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10182914 Description A memory corruption issue exists due to use after free in the display component. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. Use...

PT-2025-48617

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2025-48631

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4796...

PT-2025-48613

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash may occur due to an uncaught exception, potentially leading to remote denial of service. This can happen if a user equipment UE connects to a rogue base station controlled by an...

PT-2025-48630

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10196993 Description A memory corruption issue exists in display due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

PT-2025-48621

In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10259774; Issue ID: MSV-5029...

PT-2025-48620

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

PT-2025-48633

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184297; Issue ID: MSV-4759...