In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01516959; Issue ID: MSV-3502.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/September-2025 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Sep 2025, 16:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mediatek mt8863
Mediatek mt6878m Mediatek mt6835t Mediatek nr17 Mediatek mt8873 Mediatek mt8792 Mediatek mt8883 Mediatek nr17r Mediatek mt8676 Mediatek mt6878 Mediatek mt6835 Mediatek mt6897 Mediatek mt6899 Mediatek mt6813 Mediatek mt6991 Mediatek mt8678 Mediatek |
|
| References | () https://corp.mediatek.com/product-security-bulletin/September-2025 - Vendor Advisory | |
| CPE | cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:* cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:* cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6878m:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:* |
02 Sep 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
01 Sep 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-01 06:15
Updated : 2025-09-03 16:07
NVD link : CVE-2025-20704
Mitre link : CVE-2025-20704
CVE.ORG link : CVE-2025-20704
JSON object : View
Products Affected
mediatek
- mt8678
- mt6878
- mt8863
- nr17r
- mt6899
- mt6835t
- mt8792
- mt8873
- mt8676
- mt6991
- mt6878m
- nr17
- mt8883
- mt6835
- mt6813
- mt6897
CWE
CWE-787
Out-of-bounds Write