MediaTek Modem Remote DoS via Rogue Base Station Error Handling
CVE-2025-20761 Published on January 6, 2026
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.
Vulnerability Analysis
Weakness Type
Improper Check for Unusual or Exceptional Conditions
The software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.
Products Associated with CVE-2025-20761
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-20761 are published in these products:
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT2735 is affected.
- Version MT2737 is affected.
- Version MT6833 is affected.
- Version MT6833P is affected.
- Version MT6835 is affected.
- Version MT6835T is affected.
- Version MT6853 is affected.
- Version MT6853T is affected.
- Version MT6855 is affected.
- Version MT6855T is affected.
- Version MT6873 is affected.
- Version MT6875 is affected.
- Version MT6875T is affected.
- Version MT6877 is affected.
- Version MT6877T is affected.
- Version MT6877TT is affected.
- Version MT6879 is affected.
- Version MT6880 is affected.
- Version MT6883 is affected.
- Version MT6885 is affected.
- Version MT6886 is affected.
- Version MT6889 is affected.
- Version MT6890 is affected.
- Version MT6891 is affected.
- Version MT6893 is affected.
- Version MT6895 is affected.
- Version MT6895TT is affected.
- Version MT6896 is affected.
- Version MT6897 is affected.
- Version MT6980 is affected.
- Version MT6980D is affected.
- Version MT6983 is affected.
- Version MT6983T is affected.
- Version MT6985 is affected.
- Version MT6985T is affected.
- Version MT6989 is affected.
- Version MT6989T is affected.
- Version MT6990 is affected.
- Version MT8673 is affected.
- Version MT8675 is affected.
- Version MT8676 is affected.
- Version MT8678 is affected.
- Version MT8755 is affected.
- Version MT8771 is affected.
- Version MT8791 is affected.
- Version MT8791T is affected.
- Version MT8792 is affected.
- Version MT8793 is affected.
- Version MT8795T is affected.
- Version MT8797 is affected.
- Version MT8798 is affected.
- Version MT8863 is affected.
- Version MT8873 is affected.
- Version MT8883 is affected.
- Version MT8893 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.