CVE-2025-20794CWE-121

CVE-2025-20794

Medium · published January 6, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

⚠️ A simple input validation issue could crash your system! When connecting to a rogue base station, an attacker can trigger a denial of service with zero user interaction. 🔥 Think of it like a faulty traffic light at a busy intersection. If it fails to validate incoming traffic properly, chaos ensues, leading to gridlock and accidents — in this case, your system crashing instead! An attacker can exploit this vulnerability to remotely overwhelm your device, causing it to crash without needing to lift a finger. This could disrupt connectivity for users connected to that rogue base station, leaving them stranded without service.

Put simply

Think of it like a faulty traffic light at a busy intersection. If it fails to validate incoming traffic properly, chaos ensues, leading to gridlock and accidents — in this case, your system crashing instead! This vulnerability in the Modem arises from improper input validation, which fails to handle unexpected data correctly, leading to potential system crashes.

What to do

An attacker can exploit this vulnerability to remotely overwhelm your device, causing it to crash without needing to lift a finger. This could disrupt connectivity for users connected to that rogue base station, leaving them stranded without service. To mitigate this risk, apply the patch IDs MOLY01689259 and MOLY01586470 immediately. Ensure that your system is updated to the latest version to prevent any potential service disruptions. You've got this! Just follow these steps and you'll keep your system running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-01-06T07:15Z
Affected products (4)
ProductVersionsFixed in
mediatek/nr15all versions—
mediatek/nr16all versions—
mediatek/nr17all versions—
mediatek/nr17rall versions—
References (1)
EPSS history
Timeline
  • 06 JAN 01:46Z
    In Modem, there is a possible system crash due to improper input validation
    cvelistv5