Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-20634

critical · 9.8

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01289384; Issue ID: MSV-2436.

9.8
CVSS
0.7%
EPSS (exploit prob.)
53rd
EPSS percentile
2025-02-03
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
mediateknr16all versions
mediateknr17all versions
mediateknr17rall versions
mediatekmt2737all versions
mediatekmt6813all versions
mediatekmt6835all versions
mediatekmt6835tall versions
mediatekmt6878all versions
mediatekmt6878mall versions
mediatekmt6879all versions
mediatekmt6886all versions
mediatekmt6895all versions
mediatekmt6895ttall versions
mediatekmt6896all versions
mediatekmt6897all versions
mediatekmt6899all versions
mediatekmt6980all versions
mediatekmt6980dall versions
mediatekmt6983all versions
mediatekmt6983tall versions
mediatekmt6985all versions
mediatekmt6985tall versions
mediatekmt6989all versions
mediatekmt6989tall versions
mediatekmt6990all versions
mediatekmt6991all versions
mediatekmt8673all versions
mediatekmt8676all versions
mediatekmt8678all versions
mediatekmt8795tall versions
mediatekmt8798all versions
mediatekmt8863all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-20634