Listen to this Post
How CVE-2025-20792 works: This vulnerability in MediaTek modem firmware stems from improper input validation during cellular signal processing. When a User Equipment (UE) connects to a rogue base station controlled by an attacker, the modem receives maliciously crafted radio resource control (RRC) or non-access stratum (NAS) messages. The modem’s parsing routines fail to validate specific fields in these messages, leading to buffer overflows or memory corruption. This triggers a system crash in the modem stack, causing a persistent denial of service. The attack exploits the modem’s trust in base station broadcasts, requiring no user interaction or elevated privileges. The crash renders the device’s cellular radio inoperable, requiring a reboot to restore functionality. Patch MOLY01717526 fixes this by adding boundary checks and sanitizing input from the base station before processing.
Platform: MediaTek Modem
Version: Unknown
Vulnerability: Denial of Service
Severity: Critical
Date: 2025-12-01
Prediction: Patch 2025-12-01
What Undercode Say:
Analytics:
– `adb shell getprop ril.version`
– `mmcli -L`
– `at+cgmm`
How Exploit:
Rogue base station broadcasts malicious RRC/NAS messages triggering modem crash.
Protection from this CVE:
Apply MediaTek patch, update modem firmware.
Impact:
Remote DoS, cellular service disruption.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
