PT-2025-48615 · Modem · Modem

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-20755

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Modem (affected versions not specified)

Description An issue exists in Modem where improper input validation can lead to an application crash and potentially result in remote denial of service. This scenario requires a user equipment (UE) to connect to a rogue base station controlled by an attacker, and does not require additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-20755

Affected Products

Modem

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-20755 · Security Note
• https://corp.mediatek.com/product-security-bulletin/December-2025 · Vendor Advisory
• https://twitter.com/CVEnew/status/1995711352057536774 · Twitter Post