In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01334347; Issue ID: MSV-2772.
References
| Link | Resource |
|---|---|
| https://corp.mediatek.com/product-security-bulletin/May-2025 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 May 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
06 May 2025, 14:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:* cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8789:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8666:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6895tt:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6989t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:* cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6983t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:* cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8788e:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8667:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6985t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6878m:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8768:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8786:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:* cpe:2.3:h:mediatek:mt8766:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
| First Time |
Mediatek mt6980
Mediatek mt6897 Mediatek mt8666 Mediatek mt8771 Mediatek nr17r Mediatek mt6985t Mediatek mt8786 Mediatek nr17 Mediatek mt8791 Mediatek mt8676 Mediatek mt6983t Mediatek mt8781 Mediatek mt6896 Mediatek mt8791t Mediatek mt8673 Mediatek mt8788 Mediatek mt6878m Mediatek mt6983 Mediatek mt8789 Mediatek mt8795t Mediatek mt8768 Mediatek mt6813 Mediatek mt8766 Mediatek mt6899 Mediatek mt8678 Mediatek mt6886 Mediatek mt8797 Mediatek mt6990 Mediatek mt8798 Mediatek mt6835 Mediatek mt6980d Mediatek mt8675 Mediatek nr16 Mediatek Mediatek mt6985 Mediatek mt6895tt Mediatek mt6878 Mediatek mt6879 Mediatek mt6895 Mediatek mt8788e Mediatek mt8667 Mediatek mt6991 Mediatek mt6989 Mediatek mt2737 Mediatek mt6989t Mediatek mt8765 Mediatek mt6835t |
|
| References | () https://corp.mediatek.com/product-security-bulletin/May-2025 - Vendor Advisory |
05 May 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-05 03:15
Updated : 2025-05-12 18:15
NVD link : CVE-2025-20670
Mitre link : CVE-2025-20670
JSON object : View
Products Affected
mediatek
- mt8789
- mt2737
- mt6991
- mt8768
- mt8788e
- mt6895tt
- mt8786
- mt6983
- mt6878m
- mt8766
- mt8791t
- mt8666
- mt6989
- mt6896
- mt8675
- mt8667
- mt8795t
- mt6899
- mt8797
- mt8771
- mt6985
- mt8781
- mt6980d
- mt8678
- mt6983t
- nr16
- mt6886
- mt8673
- mt8676
- mt8791
- nr17r
- mt6879
- nr17
- mt6897
- mt8788
- mt6980
- mt6878
- mt6895
- mt8765
- mt8798
- mt6990
- mt6835
- mt6989t
- mt6813
- mt6985t
- mt6835t
CWE
No CWE.