In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00211.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Mediatek Subscribe
Mt6835 Subscribe
Mt6835t Subscribe
Mt6878 Subscribe
Mt6878m Subscribe
Mt6897 Subscribe
Mt6899 Subscribe
Mt6991 Subscribe
Mt8676 Subscribe
Mt8678 Subscribe
Mt8755 Subscribe
Mt8792 Subscribe
Mt8793 Subscribe
Mt8863 Subscribe
Mt8873 Subscribe
Mt8883 Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Mediatek Subscribe
Mt6835 Subscribe
Mt6835t Subscribe
Mt6878 Subscribe
Mt6878m Subscribe
Mt6897 Subscribe
Mt6899 Subscribe
Mt6991 Subscribe
Mt8676 Subscribe
Mt8678 Subscribe
Mt8755 Subscribe
Mt8792 Subscribe
Mt8793 Subscribe
Mt8863 Subscribe
Mt8873 Subscribe
Mt8883 Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://corp.mediatek.com/product-security-bulletin/January-2026 cve-icon cve-icon
History

Tue, 06 Jan 2026 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 06 Jan 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Tue, 06 Jan 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mt6835
Mediatek mt6835t
Mediatek mt6878
Mediatek mt6878m
Mediatek mt6897
Mediatek mt6899
Mediatek mt6991
Mediatek mt8676
Mediatek mt8678
Mediatek mt8755
Mediatek mt8792
Mediatek mt8793
Mediatek mt8863
Mediatek mt8873
Mediatek mt8883
Vendors & Products Mediatek
Mediatek mt6835
Mediatek mt6835t
Mediatek mt6878
Mediatek mt6878m
Mediatek mt6897
Mediatek mt6899
Mediatek mt6991
Mediatek mt8676
Mediatek mt8678
Mediatek mt8755
Mediatek mt8792
Mediatek mt8793
Mediatek mt8863
Mediatek mt8873
Mediatek mt8883

Tue, 06 Jan 2026 02:15:00 +0000

Type Values Removed Values Added
Description In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.
Weaknesses CWE-617
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published:

Updated: 2026-01-06T18:59:35.854Z

Reserved: 2024-11-01T01:21:50.398Z

Link: CVE-2025-20762

cve-icon Vulnrichment

Updated: 2026-01-06T14:22:18.834Z

cve-icon NVD

Status : Received

Published: 2026-01-06T02:15:41.807

Modified: 2026-01-06T19:15:58.383

Link: CVE-2025-20762

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-01-06T14:16:19Z

Weaknesses