CVE-2025-20666
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/05/2025
Last modified:
12/05/2025
Description
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00650610; Issue ID: MSV-2933.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6833p:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6855t:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6875t:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6877t:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6877tt:-:*:*:*:*:*:*:* | ||
cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page