CVE-2025-20762CWE-617

CVE-2025-20762

Medium · published January 6, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

⚠️ An unexpected crash is lurking in Modem! Just a rogue connection to a base station could bring your system down, and it doesn’t even require user interaction to pull it off! Think of it as a power outage caused by a neighborhood prankster who trips the main switch — one wrong connection and your whole party is in the dark! This vulnerability could lead to a disruptive remote denial of service, making your system completely unresponsive. Imagine all your users left hanging with no access, all because of a sneaky connection that shouldn’t have been allowed in the first place!

Put simply

Think of it as a power outage caused by a neighborhood prankster who trips the main switch — one wrong connection and your whole party is in the dark! CVS-2025-20762 arises from incorrect error handling in Modem, allowing a remote attacker to crash the system by exploiting a connection to a rogue base station. No special execution privileges or user interaction are required for this exploit.

What to do

This vulnerability could lead to a disruptive remote denial of service, making your system completely unresponsive. Imagine all your users left hanging with no access, all because of a sneaky connection that shouldn’t have been allowed in the first place! To protect your system, apply patch MOLY01685181 as soon as possible. Additionally, ensure your systems are configured to reject connections from untrusted base stations to minimize risk. Regularly audit your network for rogue connections! You've got this! With these steps, your system will be back up and running safely in no time! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-01-06T07:15Z
Affected products (1)
ProductVersionsFixed in
mediatek/nr17all versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In Modem, there is a possible system crash due to incorrect error handling
    cvelistv5