Out of Bounds Write Vulnerability in MediaTek Modem Products
CVE-2025-20704
8.8HIGH
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 1 September 2025
What is CVE-2025-20704?
A vulnerability exists in MediaTek modems due to a lack of proper bounds checking, which could be exploited by attackers controlling a rogue base station. This flaw allows for the potential remote escalation of privileges without needing additional execution rights. User interaction is required for an attack to occur. Patching is essential for mitigation.
Affected Version(s)
MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6897, MT6899, MT6991, MT8676, MT8678, MT8792, MT8863, MT8873, MT8883 Modem NR17, NR17R