# CVE-2025-20755: In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of…

Source: https://junglewise.ai/threats/cve-2025-20755-in-modem-there-is-a-possible-application-crash-due-to-improper  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-02  
License: CC BY 4.0 with a link back

CVE-2025-20755 · Severity: medium · CVSS 5.3 · Published 2025-12-02

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00628396; Issue ID: MSV-4775.

Technologies: [MediaTek MT2735](https://junglewise.ai/threats/technologies/mt2735), [MediaTek MT6833](https://junglewise.ai/threats/technologies/mt6833), [MediaTek Mt6833p](https://junglewise.ai/threats/technologies/mt6833p), [MediaTek Mt6853](https://junglewise.ai/threats/technologies/mt6853), [MediaTek Mt6853t](https://junglewise.ai/threats/technologies/mt6853t), [MediaTek Mt6855](https://junglewise.ai/threats/technologies/mt6855), [MediaTek Mt6855t](https://junglewise.ai/threats/technologies/mt6855t), [MediaTek MT6873](https://junglewise.ai/threats/technologies/mt6873), [MediaTek Mt6875](https://junglewise.ai/threats/technologies/mt6875), [MediaTek Mt6875t](https://junglewise.ai/threats/technologies/mt6875t), [MediaTek Mt6877](https://junglewise.ai/threats/technologies/mt6877), [MediaTek Mt6877t](https://junglewise.ai/threats/technologies/mt6877t), [MediaTek Mt6877tt](https://junglewise.ai/threats/technologies/mt6877tt), [MediaTek Mt6880](https://junglewise.ai/threats/technologies/mt6880), [MediaTek Mt6883](https://junglewise.ai/threats/technologies/mt6883), [MediaTek Mt6885](https://junglewise.ai/threats/technologies/mt6885), [MediaTek Mt6889](https://junglewise.ai/threats/technologies/mt6889), [MediaTek Mt6890](https://junglewise.ai/threats/technologies/mt6890), [MediaTek MT6891](https://junglewise.ai/threats/technologies/mt6891), [MediaTek Mt6893](https://junglewise.ai/threats/technologies/mt6893), [MediaTek Mt8675](https://junglewise.ai/threats/technologies/mt8675), [MediaTek Mt8771](https://junglewise.ai/threats/technologies/mt8771), [MediaTek MT8791](https://junglewise.ai/threats/technologies/mt8791), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8797](https://junglewise.ai/threats/technologies/mt8797), [MediaTek Nr15](https://junglewise.ai/threats/technologies/nr15). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2025-20755 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-20755 being exploited in the wild.

**How severe is CVE-2025-20755?** Medium severity, with a CVSS score of 5.3, published 2 December 2025.

**Which products and versions are affected?** MediaTek MT2735, MediaTek MT6833, MediaTek Mt6833p, MediaTek Mt6853 and 22 more. The advisory does not name versions.

**Is there a fix for CVE-2025-20755?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-20755?** Check whether you run MediaTek MT2735, MediaTek MT6833, MediaTek Mt6833p or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- MediaTek MT2735
- MediaTek MT6833
- MediaTek Mt6833p
- MediaTek Mt6853
- MediaTek Mt6853t
- MediaTek Mt6855
- MediaTek Mt6855t
- MediaTek MT6873
- MediaTek Mt6875
- MediaTek Mt6875t
- MediaTek Mt6877
- MediaTek Mt6877t
- MediaTek Mt6877tt
- MediaTek Mt6880
- MediaTek Mt6883
- MediaTek Mt6885
- MediaTek Mt6889
- MediaTek Mt6890
- MediaTek MT6891
- MediaTek Mt6893
- MediaTek Mt8675
- MediaTek Mt8771
- MediaTek MT8791
- MediaTek Mt8791t
- MediaTek Mt8797
- MediaTek Nr15

## Related threats

- [MediaTek ccci out of bounds write](https://junglewise.ai/threats/cve-2026-20552-in-ccci-there-is-a-possible-out-of-bounds-write-due-to-a-missing)
- [MediaTek vdec out-of-bounds write in type confusion](https://junglewise.ai/threats/cve-2026-20579-in-vdec-there-is-a-possible-out-of-bounds-write-due-to-type)
- [MediaTek out of bounds write in modem](https://junglewise.ai/threats/cve-2026-20544-in-meta-there-is-a-possible-out-of-bounds-write-due-to-a-missing)
- [MediaTek Modem information disclosure due to logic error](https://junglewise.ai/threats/cve-2026-20543-in-modem-there-is-a-possible-information-disclosure-due-to-a)
- [MediaTek Modem out-of-bounds read due to missing permission check](https://junglewise.ai/threats/cve-2026-20538-in-modem-there-is-a-possible-out-of-bounds-read-due-to-a-missing)