CVE-2025-20760 MediaTek, Inc. CVE debrief

Who should care

Defenders responsible for Mediatek-based devices, network administrators, and security teams should be aware of this vulnerability and take steps to mitigate it. They should review compensating controls for exposed systems while remediation is scheduled and verified, check relevant monitoring, detection, and logs for exposed assets that need extra review, and track exceptions, retest remediated assets, and close the item only after evidence is documented.

Why it matters

CVE-2025-20760 is a medium-severity vulnerability in Mediatek's Modem component that can lead to remote denial of service. Defenders should prioritize patching or mitigating this vulnerability, especially for devices exposed to untrusted networks or base stations.

• Remote denial of service is possible if a device connects to a rogue base station
• No user interaction or additional privileges are required for exploitation
• Patching or mitigating this vulnerability can prevent potential disruptions to critical services

Technical summary

The vulnerability is caused by an uncaught exception in the Mediatek Modem component, which can lead to the reading of uninitialized heap data. This can result in a remote denial of service if a device connects to a rogue base station controlled by an attacker. The vulnerability has a CVSS score of 6.5 and is classified as medium-severity. Defenders should prioritize patching or mitigating this vulnerability, especially for devices exposed to untrusted networks or base stations. The vulnerability affects Mediatek-based devices, and defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Defensive priority

Defenders should prioritize patching or mitigating this vulnerability, especially for devices exposed to untrusted networks or base stations.

Recommended defensive actions

• Apply patches or updates provided by Mediatek to fix the vulnerability
• Implement network security measures to prevent connections to rogue base stations
• Monitor devices for unusual activity or signs of exploitation
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, including its description, CVSS score, and affected components. A vendor advisory from Mediatek is also available. The vulnerability affects Mediatek-based devices, and defenders should verify the affected scope and vendor guidance. The CVE record was published on 2026-01-06T02:15:41.520Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.