CVE Catalog

CVE-2025-20762

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

20th percentile - higher than 20% of all known CVEs

Summary

In the Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

The risk is the potential for remote disruption of devices using the modem, which could lead to service outages. The attack does not require user interaction, increasing its danger.

Recommendation

It is recommended to apply the vendor's patch as soon as possible (Patch ID: MOLY01685181). Also monitor cellular communications for suspicious base stations.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS