Vulnerability Description
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediatek | Mt2735 Firmware | - |
| Mediatek | Mt2735 | - |
| Mediatek | Mt2737 Firmware | - |
| Mediatek | Mt2737 | - |
| Mediatek | Mt6739 Firmware | - |
| Mediatek | Mt6739 | - |
| Mediatek | Mt6761 Firmware | - |
| Mediatek | Mt6761 | - |
| Mediatek | Mt6762 Firmware | - |
| Mediatek | Mt6762 | - |
| Mediatek | Mt6762D Firmware | - |
| Mediatek | Mt6762D | - |
| Mediatek | Mt6762M Firmware | - |
| Mediatek | Mt6762M | - |
| Mediatek | Mt6763 Firmware | - |
| Mediatek | Mt6763 | - |
| Mediatek | Mt6765 Firmware | - |
| Mediatek | Mt6765 | - |
| Mediatek | Mt6765T Firmware | - |
| Mediatek | Mt6765T | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-20659?
CVE-2025-20659 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with...
How severe is CVE-2025-20659?
CVE-2025-20659 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-20659?
Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Mt2735 Firmware, Mediatek Mt2735, Mediatek Mt2737 Firmware, Mediatek Mt2737, Mediatek Mt6739 Firmware.