Vulnerability Details CVE-2025-20634
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01289384; Issue ID: MSV-2436.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.5%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-20634
-
cpe:2.3:h:mediatek:mt2737:-
-
cpe:2.3:h:mediatek:mt6813:-
-
cpe:2.3:h:mediatek:mt6835:-
-
cpe:2.3:h:mediatek:mt6835t:-
-
cpe:2.3:h:mediatek:mt6878:-
-
cpe:2.3:h:mediatek:mt6878m:-
-
cpe:2.3:h:mediatek:mt6879:-
-
cpe:2.3:h:mediatek:mt6886:-
-
cpe:2.3:h:mediatek:mt6895:-
-
cpe:2.3:h:mediatek:mt6895tt:-
-
cpe:2.3:h:mediatek:mt6896:-
-
cpe:2.3:h:mediatek:mt6897:-
-
cpe:2.3:h:mediatek:mt6899:-
-
cpe:2.3:h:mediatek:mt6980:-
-
cpe:2.3:h:mediatek:mt6980d:-
-
cpe:2.3:h:mediatek:mt6983:-
-
cpe:2.3:h:mediatek:mt6983t:-
-
cpe:2.3:h:mediatek:mt6985:-
-
cpe:2.3:h:mediatek:mt6985t:-
-
cpe:2.3:h:mediatek:mt6989:-
-
cpe:2.3:h:mediatek:mt6989t:-
-
cpe:2.3:h:mediatek:mt6990:-
-
cpe:2.3:h:mediatek:mt6991:-
-
cpe:2.3:h:mediatek:mt8673:-
-
cpe:2.3:h:mediatek:mt8676:-
-
cpe:2.3:h:mediatek:mt8678:-
-
cpe:2.3:h:mediatek:mt8795t:-
-
cpe:2.3:h:mediatek:mt8798:-
-
cpe:2.3:h:mediatek:mt8863:-
-
cpe:2.3:o:mediatek:nr16:-
-
cpe:2.3:o:mediatek:nr17:-
-
cpe:2.3:o:mediatek:nr17r:-