CVE-2025-20758

CVE-2025-20758 : In MediaTek Modem components, an uncaught exception can cause a system crash, enabling remote DoS when a UE connects to a rogue base station. Exploitation requires no user interaction and can occur over the network. The issue is documented in multiple sources (e.g., Red Hat RH:CV...

CVE-2025-20759

In MediaTek Modem CVE-2025-20759, the issue is a missing bounds check causing an out-of-bounds read in the Modem component. This can enable remote denial of service when a user equipment (UE) connects to a rogue base station without requiring user interaction and with no additional privileges. Pu...

CVE-2025-20759

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20790

CVE-2025-20790 describes a vulnerability in MediaTek Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station without extra privileges and with no user interaction. The fixed patch is MOLY01677581 (MSV-4701). The ...

CVE-2025-20755

CVE-2025-20755 describes a vulnerability in MediaTek Modem components (MOLY) where improper input validation can crash the application, causing remote denial of service without user interaction if a UE connects to a rogue base station. Affected: Modem stack; Root cause: input validation flaw lead...

CVE-2025-20755

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20754

In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20753

CVE-2025-20753 affects MediaTek Modem: an uncaught exception in the Modem can cause a system crash, enabling remote DoS if a UE connects to a rogue base station; no user interaction required. Patch MOLY01689252 (MSV-4841) is referenced as the fix. The CVSS vector in the initial record indicates n...

CVE-2025-20792

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2025-20792

The CVE-2025-20792 issue affects MediaTek Modem components (e.g., Modem) and stems from improper input validation that can crash the system, enabling remote denial of service when a UE connects to a rogue base station. No user interaction is required; exploitation is possible over the network wit...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-58488

The connected Red Hat, NVD, CVE Registry, and vendor records confirm CVE-2025-58488 affects Samsung SmartTouchCall prior to version 1.0.1.1. The root cause is improper verification of the origin of a communication channel, which could allow a remote attacker to access sensitive information. Explo...

EUVD-2025-200130

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

PT-2025-48620

In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267218; Issue ID: MSV-5032...

PT-2025-48613

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash may occur due to an uncaught exception, potentially leading to remote denial of service. This can happen if a user equipment UE connects to a rogue base station controlled by an...

PT-2025-48630

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10196993 Description A memory corruption issue exists in display due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

PT-2025-48631

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4796...