CVE-2025-20659

The CVE-2025-20659 entry concerns a vulnerability in Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and has an adjacent attack vector with no privileges require...

CVE-2026-20449

A heap buffer overflow in the Modem component, specifically within MediaTek chipsets, can cause a system crash resulting in a remote denial of service (DoS) . This vulnerability occurs when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution p...