CVE-2025-20727CWE-787

In Modem, there is a possible out of bounds write due to a heap buffer overflow

High · published November 4, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

⚡ A heap buffer overflow in Modem could be a game-changer, allowing attackers to escalate privileges if a user unwittingly connects to a rogue base station! 🚨 Think of it like a sneaky delivery driver dropping off a package at the wrong house. Instead of just a misplaced item, this flaw lets the attacker take over the entire parcel and decide what gets delivered next! If exploited, an attacker could gain full control of the device, potentially accessing sensitive data or manipulating system functions. Imagine handing over the keys to your house without realizing you were just tricked into doing so!

Put simply

Think of it like a sneaky delivery driver dropping off a package at the wrong house. Instead of just a misplaced item, this flaw lets the attacker take over the entire parcel and decide what gets delivered next! This vulnerability arises from a heap buffer overflow in Modem, which can lead to unauthorized access and privilege escalation when a user connects to a malicious base station, with no need for additional permissions or user input.

What to do

If exploited, an attacker could gain full control of the device, potentially accessing sensitive data or manipulating system functions. Imagine handing over the keys to your house without realizing you were just tricked into doing so! To safeguard against this vulnerability, patch to version identified with Patch ID: MOLY01672601 immediately. Regularly check and update your device’s firmware to mitigate such risks in the future. Be sure to monitor for any suspicious connections! You've got this! Stay proactive, patch up, and keep your devices safe! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-04T06:19Z
EPSS history
Timeline
  • 04 NOV 06:19Z
    In Modem, there is a possible out of bounds write due to a heap buffer overflow
    cvelistv5