CVE-2025-20752 – A missing bounds check vulnerability in MediaTe... (How to Fix)

Q: What is the severity of CVE-2025-20752?

CVE-2025-20752 has a CVSS score of 6.5 (MEDIUM). A missing bounds check vulnerability in MediaTek modems could allow remote denial of service attacks. When a user equipment (UE) connects to a rogue base station controlled by an attacker, it can cause system crashes without requiring user interaction or additional privileges. This affects devices using vulnerable MediaTek modem chipsets.

📋 TL;DR

A missing bounds check vulnerability in MediaTek modems could allow remote denial of service attacks. When a user equipment (UE) connects to a rogue base station controlled by an attacker, it can cause system crashes without requiring user interaction or additional privileges. This affects devices using vulnerable MediaTek modem chipsets.

💻 Affected Systems

Products:

MediaTek modem chipsets

Versions: Specific versions not publicly detailed in advisory

Operating Systems: Android and other mobile OS using MediaTek modems

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices with vulnerable MediaTek modem firmware. Exact device models not specified in advisory.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete device/system crash requiring reboot, potentially disrupting critical communications and services.

🟠

Likely Case

Temporary denial of service affecting mobile connectivity until device reboots or reconnects to legitimate base station.

🟢

If Mitigated

Limited impact with proper network controls preventing connection to rogue base stations.

🌐 Internet-Facing: MEDIUM - Requires proximity to target and rogue base station setup, but no authentication needed.

🏢 Internal Only: LOW - Typically requires external rogue base station, not internal network access.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires setting up rogue base station and proximity to target devices.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patch ID: MOLY01270690

Vendor Advisory: https://corp.mediatek.com/product-security-bulletin/December-2025

Restart Required: Yes

Instructions:

1. Check with device manufacturer for firmware updates. 2. Apply MediaTek modem firmware patch MOLY01270690. 3. Reboot device after patch installation.

🔧 Temporary Workarounds

Network Access Control

all

Configure devices to only connect to trusted base stations/networks

Disable Automatic Network Switching

all

Prevent devices from automatically connecting to unknown base stations

🧯 If You Can't Patch

Implement network monitoring for rogue base station detection
Restrict device usage in high-risk areas where rogue base stations could be deployed

🔍 How to Verify

Check if Vulnerable:

Check modem firmware version against MediaTek security bulletin or contact device manufacturer

Check Version:

Device-specific commands vary by manufacturer. Typically in device settings > About phone > Baseband version

Verify Fix Applied:

Verify patch MOLY01270690 is applied in modem firmware version

📡 Detection & Monitoring

Log Indicators:

Unexpected modem crashes/resets
Base station connection failures
System crash logs mentioning modem

Network Indicators:

Devices connecting to unknown base stations
Unusual base station identifiers in network logs

SIEM Query:

Search for modem crash events, base station connection anomalies, or system reboots in mobile device logs

📊 Metadata

CVE ID: CVE-2025-20752

CVSS v3 Score: 6.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-617

Published: December 2, 2025

Last Updated: February 17, 2026

🔗 References

https://corp.mediatek.com/product-security-bulletin/December-2025 Vendor Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-20752, you might also want to check these: