Vulnerability

CVE-2025-20647

Component: CELLULAR
Location: FIRMWARE
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

N/A

Severity (Android)

N/A

Chipsets

48

Devices

1022

Affected Hardware

NameAlso known asManufacturer
MT6739
MediaTek
MT6762
Helio P22
MediaTek
MT6765
Helio P35
MediaTek
MT6771
Helio P60
MediaTek
MT6768
Helio P65
MediaTek
MT6769T
Helio G80
MediaTek
MT6769Z
Helio G85
MediaTek
MT6781
Helio G96
MediaTek
MT6789
Helio G99
MediaTek
MT6833
Dimensity 6020
Dimensity 700
MediaTek
48 of 48 row(s) shown.

Rows per page

Page 1 of 5

Timeline

Introduced (est):
Jul 1, 2017
Reported:
Unknown
Advisory Published:
Mar 3, 2025
CVE Published:
N/A
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter