CVE Catalog

CVE-2025-20761

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

17th percentile - higher than 17% of all known CVEs

Summary

In the Modem component, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges or user interaction needed.

Risk Assessment

The risk involves potential remote disruption of device operation, which could lead to service outages and loss of availability.

Recommendation

Apply patch MOLY01311265 and monitor connections to suspicious base stations.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS