CVE-2025-20793CWE-476

CVE-2025-20793

Medium · published January 6, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky error handling issue in Modem could crash your system remotely without breaking a sweat! Think of it like an unattended check-in desk at a hotel; any guest can stroll up and cause chaos without even needing a reservation. In this case, a rogue base station can exploit this flaw to take your system down without any user interaction required! If an attacker controls a rogue base station, they could trigger a denial of service, leaving your connection in the dust. This could lead to frustrating outages and potential disruptions, particularly in sensitive environments where reliable communication is crucial.

Put simply

Think of it like an unattended check-in desk at a hotel; any guest can stroll up and cause chaos without even needing a reservation. In this case, a rogue base station can exploit this flaw to take your system down without any user interaction required! This vulnerability arises from improper error handling in Modem, which can allow a remote attacker to cause a system crash when a User Equipment (UE) connects to a rogue base station, without needing any privileged access.

What to do

If an attacker controls a rogue base station, they could trigger a denial of service, leaving your connection in the dust. This could lead to frustrating outages and potential disruptions, particularly in sensitive environments where reliable communication is crucial. To tackle this, patch your systems with ID MOLY01430930 right away! Monitoring for rogue base stations and implementing additional security measures will also help mitigate this risk in the future. You've got this! Patch up and keep your systems running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-01-06T07:15Z
Affected products (4)
ProductVersionsFixed in
mediatek/nr15all versions—
mediatek/nr16all versions—
mediatek/nr17all versions—
mediatek/nr17rall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In Modem, there is a possible system crash due to incorrect error handling
    cvelistv5