CVE-2025-20761CWE-754

CVE-2025-20761

Medium · published January 6, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

⚠️ Watch out for rogue base stations! A simple error handling flaw in Modem could potentially crash your system without needing any user intervention. 🔥 Think of it like a restaurant that fails to handle a complaint properly; one unhappy diner can ruin the meal for everyone else. If a device connects to a rogue base station, it's like a patron getting bad service that disrupts the entire dining experience! An attacker controlling a rogue base station could spark a denial of service, crashing connected devices and leaving users frustrated. Picture your trusty smartphone unable to connect to the network, all because it latched onto the wrong signal!

Put simply

Think of it like a restaurant that fails to handle a complaint properly; one unhappy diner can ruin the meal for everyone else. If a device connects to a rogue base station, it's like a patron getting bad service that disrupts the entire dining experience! The vulnerability arises from improper error handling in Modem, allowing for a system crash when a user equipment (UE) connects to a malicious base station. This issue requires no additional execution privileges or user interaction for exploitation.

What to do

An attacker controlling a rogue base station could spark a denial of service, crashing connected devices and leaving users frustrated. Picture your trusty smartphone unable to connect to the network, all because it latched onto the wrong signal! To safeguard your systems, patch immediately using Patch ID: MOLY01311265. Additionally, educate users on avoiding unknown base stations and implement network monitoring to detect suspicious activity. You've got this! With these steps, you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.9th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-01-06T07:15Z
Affected products (3)
ProductVersionsFixed in
mediatek/nr15all versions—
mediatek/nr16all versions—
mediatek/nr17all versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In Modem, there is a possible system crash due to incorrect error handling
    cvelistv5