CVE-2025-20791mediumCWE-617

CVE-2025-20791: medium-severity vulnerability in MediaTek, Inc. MT2735, MT6833, MT6833P…

Published · Updated

Follow this CVE+ Monitor MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01661189; Issue ID: MSV-4298.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
MediaTek, Inc. · MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8771, MT8791, MT8791T, MT8797
Related CVEs — MediaTek, Inc. MT2735, MT6833, MT6833P…

In the same product, most dangerous first.

CVE-2025-20790MEDIUMCVE-2025-20790EPSS 0.4%CVE-2025-20755MEDIUMCVE-2025-20755EPSS 0.4%CVE-2025-20757MEDIUMCVE-2025-20757EPSS 0.3%CVE-2025-20750MEDIUMCVE-2025-20750EPSS 0.3%CVE-2025-20751MEDIUMCVE-2025-20751EPSS 0.3%