Search/CVE-2025-20758
● CVE — Medium

CVE-2025-20758

VendormediatekProductnr15, nr16, nr17, nr17rDiscoveredDec 2, 2025UpdatedDec 3, 2025

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673755; Issue ID: MSV-4647.

CVSS v3.1
4.9 MEDIUM
EPSS
0.51%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 29, 2026
▲ 0.01pp
0.50% → 0.51% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Connections
5 relationships
Timeline
disclosure → media coverage
Dec 2, 2025
Disclosure — published as a CVE record.