Denial of Service Vulnerability in Modem by MediaTek
CVE-2025-20762

7.5HIGH

Key Information:

Vendor

MediaTek
Status
Mt6835, Mt6835t, Mt6878, Mt6878m, Mt6897, Mt6899, Mt6991, Mt8676, Mt8678, Mt8755, Mt8792, Mt8793, Mt8863, Mt8873, Mt8883
Vendor
CVE Published:
6 January 2026

What is CVE-2025-20762?

An issue has been identified in MediaTek's Modem where improper error handling can trigger a system crash. This vulnerability could be exploited via a rogue base station controlled by an attacker, allowing for remote denial of service without requiring user interaction. Users of affected modem firmware should apply patch ID MOLY01685181 to mitigate this risk.

Affected Version(s)

MT6835, MT6835T, MT6878, MT6878M, MT6897, MT6899, MT6991, MT8676, MT8678, MT8755, MT8792, MT8793, MT8863, MT8873, MT8883 Modem NR17

References

https://corp.mediatek.com/product-security-bulletin/Janua...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.