In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Mediatek
  • Mt2735
  • Mt2737
  • Mt6833
  • Mt6833p
  • Mt6835
  • Mt6835t
  • Mt6853
  • Mt6853t
  • Mt6855
  • Mt6855t
  • Mt6873
  • Mt6875
  • Mt6875t
  • Mt6877
  • Mt6877t
  • Mt6877tt
  • Mt6879
  • Mt6880
  • Mt6883
  • Mt6885
  • Mt6886
  • Mt6889
  • Mt6890
  • Mt6891
  • Mt6893
  • Mt6895
  • Mt6895tt
  • Mt6896
  • Mt6897
  • Mt6980
  • Mt6980d
  • Mt6983
  • Mt6983t
  • Mt6985
  • Mt6985t
  • Mt6989
  • Mt6989t
  • Mt6990
  • Mt8673
  • Mt8675
  • Mt8676
  • Mt8678
  • Mt8755
  • Mt8771
  • Mt8791
  • Mt8791t
  • Mt8792
  • Mt8793
  • Mt8795t
  • Mt8797
  • Mt8798
  • Mt8863
  • Mt8873
  • Mt8883
  • Mt8893
  • Nr15
  • Nr16
  • Nr17
Mediatk
  • Mt2735
  • Mt2737
  • Mt6833
  • Mt6833p
  • Mt6853
  • Mt6853t
  • Mt6855
  • Mt6855t
  • Mt6873
  • Mt6875
  • Mt6875t
  • Mt6877
  • Mt6877t
  • Mt6877tt
  • Mt6879
  • Mt6880
  • Mt6883
  • Mt6885
  • Mt6886
  • Mt6889
  • Mt6890
  • Mt6891
  • Mt6893
  • Mt6895
  • Mt6895tt
  • Mt6896
  • Mt6980
  • Mt6980d
  • Mt6983
  • Mt6983t
  • Mt6985
  • Mt6985t
  • Mt6989
  • Mt6989t
  • Mt6990
  • Mt8673
  • Mt8675
  • Mt8771
  • Mt8791
  • Mt8791t
  • Mt8795t
  • Mt8797
  • Mt8798
  • Mt8893

Configuration 1 [-]

AND
OR cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*
OR cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6833p:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6855t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6875t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877tt:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895tt:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*

No data.

References
Link Providers
https://corp.mediatek.com/product-security-bulletin/January-2026 cve-icon cve-icon
History

Thu, 08 Jan 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek mt2735
Mediatek mt2737
Mediatek mt6833
Mediatek mt6833p
Mediatek mt6853
Mediatek mt6853t
Mediatek mt6855
Mediatek mt6855t
Mediatek mt6873
Mediatek mt6875
Mediatek mt6875t
Mediatek mt6877
Mediatek mt6877t
Mediatek mt6877tt
Mediatek mt6879
Mediatek mt6880
Mediatek mt6883
Mediatek mt6885
Mediatek mt6886
Mediatek mt6889
Mediatek mt6890
Mediatek mt6891
Mediatek mt6893
Mediatek mt6895
Mediatek mt6895tt
Mediatek mt6896
Mediatek mt6980
Mediatek mt6980d
Mediatek mt6983
Mediatek mt6983t
Mediatek mt6985
Mediatek mt6985t
Mediatek mt6989
Mediatek mt6989t
Mediatek mt6990
Mediatek mt8673
Mediatek mt8675
Mediatek mt8771
Mediatek mt8791
Mediatek mt8791t
Mediatek mt8795t
Mediatek mt8797
Mediatek mt8798
Mediatek mt8893
Mediatek nr15
Mediatek nr16
Mediatek nr17
CPEs cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6833p:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6855t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6875t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6877tt:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895tt:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6989t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*
Vendors & Products Mediatek mt2735
Mediatek mt2737
Mediatek mt6833
Mediatek mt6833p
Mediatek mt6853
Mediatek mt6853t
Mediatek mt6855
Mediatek mt6855t
Mediatek mt6873
Mediatek mt6875
Mediatek mt6875t
Mediatek mt6877
Mediatek mt6877t
Mediatek mt6877tt
Mediatek mt6879
Mediatek mt6880
Mediatek mt6883
Mediatek mt6885
Mediatek mt6886
Mediatek mt6889
Mediatek mt6890
Mediatek mt6891
Mediatek mt6893
Mediatek mt6895
Mediatek mt6895tt
Mediatek mt6896
Mediatek mt6980
Mediatek mt6980d
Mediatek mt6983
Mediatek mt6983t
Mediatek mt6985
Mediatek mt6985t
Mediatek mt6989
Mediatek mt6989t
Mediatek mt6990
Mediatek mt8673
Mediatek mt8675
Mediatek mt8771
Mediatek mt8791
Mediatek mt8791t
Mediatek mt8795t
Mediatek mt8797
Mediatek mt8798
Mediatek mt8893
Mediatek nr15
Mediatek nr16
Mediatek nr17

Tue, 06 Jan 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 06 Jan 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Tue, 06 Jan 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mt6835
Mediatek mt6835t
Mediatek mt6897
Mediatek mt8676
Mediatek mt8678
Mediatek mt8755
Mediatek mt8792
Mediatek mt8793
Mediatek mt8863
Mediatek mt8873
Mediatek mt8883
Mediatk
Mediatk mt2735
Mediatk mt2737
Mediatk mt6833
Mediatk mt6833p
Mediatk mt6853
Mediatk mt6853t
Mediatk mt6855
Mediatk mt6855t
Mediatk mt6873
Mediatk mt6875
Mediatk mt6875t
Mediatk mt6877
Mediatk mt6877t
Mediatk mt6877tt
Mediatk mt6879
Mediatk mt6880
Mediatk mt6883
Mediatk mt6885
Mediatk mt6886
Mediatk mt6889
Mediatk mt6890
Mediatk mt6891
Mediatk mt6893
Mediatk mt6895
Mediatk mt6895tt
Mediatk mt6896
Mediatk mt6980
Mediatk mt6980d
Mediatk mt6983
Mediatk mt6983t
Mediatk mt6985
Mediatk mt6985t
Mediatk mt6989
Mediatk mt6989t
Mediatk mt6990
Mediatk mt8673
Mediatk mt8675
Mediatk mt8771
Mediatk mt8791
Mediatk mt8791t
Mediatk mt8795t
Mediatk mt8797
Mediatk mt8798
Mediatk mt8893
Vendors & Products Mediatek
Mediatek mt6835
Mediatek mt6835t
Mediatek mt6897
Mediatek mt8676
Mediatek mt8678
Mediatek mt8755
Mediatek mt8792
Mediatek mt8793
Mediatek mt8863
Mediatek mt8873
Mediatek mt8883
Mediatk
Mediatk mt2735
Mediatk mt2737
Mediatk mt6833
Mediatk mt6833p
Mediatk mt6853
Mediatk mt6853t
Mediatk mt6855
Mediatk mt6855t
Mediatk mt6873
Mediatk mt6875
Mediatk mt6875t
Mediatk mt6877
Mediatk mt6877t
Mediatk mt6877tt
Mediatk mt6879
Mediatk mt6880
Mediatk mt6883
Mediatk mt6885
Mediatk mt6886
Mediatk mt6889
Mediatk mt6890
Mediatk mt6891
Mediatk mt6893
Mediatk mt6895
Mediatk mt6895tt
Mediatk mt6896
Mediatk mt6980
Mediatk mt6980d
Mediatk mt6983
Mediatk mt6983t
Mediatk mt6985
Mediatk mt6985t
Mediatk mt6989
Mediatk mt6989t
Mediatk mt6990
Mediatk mt8673
Mediatk mt8675
Mediatk mt8771
Mediatk mt8791
Mediatk mt8791t
Mediatk mt8795t
Mediatk mt8797
Mediatk mt8798
Mediatk mt8893

Tue, 06 Jan 2026 02:15:00 +0000

Type Values Removed Values Added
Description In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.
Weaknesses CWE-754
References
cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published:

Updated: 2026-01-06T18:59:26.813Z

Reserved: 2024-11-01T01:21:50.398Z

Link: CVE-2025-20761

cve-icon Vulnrichment

Updated: 2026-01-06T14:22:04.586Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-06T02:15:41.680

Modified: 2026-01-08T19:25:51.847

Link: CVE-2025-20761

cve-icon Redhat

No data.