CVE-2025-20727
HIGH
8.1
CVSS Score
Published: November 4, 2025 at 06:19 AM UTC
Updated: June 17, 2026 at 08:41 AM UTC
89 products affected across 1 vendorNR15NR16NR17
Using MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 by MediaTek, Inc.?
Get instant alerts when new vulnerabilities affect MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6771, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8667, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8786, MT8788, MT8788E, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.1
Exploit prediction
EPSS 0.6%
SSVC
No known exploit
Description
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
All versions
mediatek-mt2735 (environment) · mediatek-mt2737 (environment) · mediatek-mt6739 (environment) · mediatek-mt6761 (environment) · mediatek-mt6762 (environment) · mediatek-mt6762d (environment) · mediatek-mt6762m (environment) · mediatek-mt6763 (environment) · mediatek-mt6765 (environment) · mediatek-mt6765t (environment) · mediatek-mt6767 (environment) · mediatek-mt6768 (environment) · mediatek-mt6769 (environment) · mediatek-mt6769k (environment) · mediatek-mt6769s (environment) · mediatek-mt6769t (environment) · mediatek-mt6769z (environment) · mediatek-mt6771 (environment) · mediatek-mt6813 (environment) · mediatek-mt6833 (environment) · mediatek-mt6833p (environment) · mediatek-mt6835 (environment) · mediatek-mt6835t (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6855 (environment) · mediatek-mt6855t (environment) · mediatek-mt6873 (environment) · mediatek-mt6875 (environment) · mediatek-mt6875t (environment) · mediatek-mt6877 (environment) · mediatek-mt6877t (environment) · mediatek-mt6877tt (environment) · mediatek-mt6878 (environment) · mediatek-mt6878m (environment) · mediatek-mt6879 (environment) · mediatek-mt6880 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6886 (environment) · mediatek-mt6889 (environment) · mediatek-mt6890 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6895tt (environment) · mediatek-mt6896 (environment) · mediatek-mt6897 (environment) · mediatek-mt6899 (environment) · mediatek-mt6980 (environment) · mediatek-mt6980d (environment) · mediatek-mt6983 (environment) · mediatek-mt6983t (environment) · mediatek-mt6985 (environment) · mediatek-mt6985t (environment) · mediatek-mt6989 (environment) · mediatek-mt6989t (environment) · mediatek-mt6990 (environment) · mediatek-mt6991 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8673 (environment) · mediatek-mt8675 (environment) · mediatek-mt8676 (environment) · mediatek-mt8678 (environment) · mediatek-mt8765 (environment) · mediatek-mt8766 (environment) · mediatek-mt8766r (environment) · mediatek-mt8768 (environment) · mediatek-mt8771 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment) · mediatek-mt8788e (environment) · mediatek-mt8791 (environment) · mediatek-mt8791t (environment) · mediatek-mt8792 (environment) · mediatek-mt8793 (environment) · mediatek-mt8795t (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment) · mediatek-mt8863 (environment) · mediatek-mt8873 (environment) · mediatek-mt8883 (environment) · mediatek-mt8893 (environment)
All versions
mediatek-mt2735 (environment) · mediatek-mt2737 (environment) · mediatek-mt6739 (environment) · mediatek-mt6761 (environment) · mediatek-mt6762 (environment) · mediatek-mt6762d (environment) · mediatek-mt6762m (environment) · mediatek-mt6763 (environment) · mediatek-mt6765 (environment) · mediatek-mt6765t (environment) · mediatek-mt6767 (environment) · mediatek-mt6768 (environment) · mediatek-mt6769 (environment) · mediatek-mt6769k (environment) · mediatek-mt6769s (environment) · mediatek-mt6769t (environment) · mediatek-mt6769z (environment) · mediatek-mt6771 (environment) · mediatek-mt6813 (environment) · mediatek-mt6833 (environment) · mediatek-mt6833p (environment) · mediatek-mt6835 (environment) · mediatek-mt6835t (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6855 (environment) · mediatek-mt6855t (environment) · mediatek-mt6873 (environment) · mediatek-mt6875 (environment) · mediatek-mt6875t (environment) · mediatek-mt6877 (environment) · mediatek-mt6877t (environment) · mediatek-mt6877tt (environment) · mediatek-mt6878 (environment) · mediatek-mt6878m (environment) · mediatek-mt6879 (environment) · mediatek-mt6880 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6886 (environment) · mediatek-mt6889 (environment) · mediatek-mt6890 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6895tt (environment) · mediatek-mt6896 (environment) · mediatek-mt6897 (environment) · mediatek-mt6899 (environment) · mediatek-mt6980 (environment) · mediatek-mt6980d (environment) · mediatek-mt6983 (environment) · mediatek-mt6983t (environment) · mediatek-mt6985 (environment) · mediatek-mt6985t (environment) · mediatek-mt6989 (environment) · mediatek-mt6989t (environment) · mediatek-mt6990 (environment) · mediatek-mt6991 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8673 (environment) · mediatek-mt8675 (environment) · mediatek-mt8676 (environment) · mediatek-mt8678 (environment) · mediatek-mt8765 (environment) · mediatek-mt8766 (environment) · mediatek-mt8766r (environment) · mediatek-mt8768 (environment) · mediatek-mt8771 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment) · mediatek-mt8788e (environment) · mediatek-mt8791 (environment) · mediatek-mt8791t (environment) · mediatek-mt8792 (environment) · mediatek-mt8793 (environment) · mediatek-mt8795t (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment) · mediatek-mt8863 (environment) · mediatek-mt8873 (environment) · mediatek-mt8883 (environment) · mediatek-mt8893 (environment)
All versions
mediatek-mt2735 (environment) · mediatek-mt2737 (environment) · mediatek-mt6739 (environment) · mediatek-mt6761 (environment) · mediatek-mt6762 (environment) · mediatek-mt6762d (environment) · mediatek-mt6762m (environment) · mediatek-mt6763 (environment) · mediatek-mt6765 (environment) · mediatek-mt6765t (environment) · mediatek-mt6767 (environment) · mediatek-mt6768 (environment) · mediatek-mt6769 (environment) · mediatek-mt6769k (environment) · mediatek-mt6769s (environment) · mediatek-mt6769t (environment) · mediatek-mt6769z (environment) · mediatek-mt6771 (environment) · mediatek-mt6813 (environment) · mediatek-mt6833 (environment) · mediatek-mt6833p (environment) · mediatek-mt6835 (environment) · mediatek-mt6835t (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6855 (environment) · mediatek-mt6855t (environment) · mediatek-mt6873 (environment) · mediatek-mt6875 (environment) · mediatek-mt6875t (environment) · mediatek-mt6877 (environment) · mediatek-mt6877t (environment) · mediatek-mt6877tt (environment) · mediatek-mt6878 (environment) · mediatek-mt6878m (environment) · mediatek-mt6879 (environment) · mediatek-mt6880 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6886 (environment) · mediatek-mt6889 (environment) · mediatek-mt6890 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6895tt (environment) · mediatek-mt6896 (environment) · mediatek-mt6897 (environment) · mediatek-mt6899 (environment) · mediatek-mt6980 (environment) · mediatek-mt6980d (environment) · mediatek-mt6983 (environment) · mediatek-mt6983t (environment) · mediatek-mt6985 (environment) · mediatek-mt6985t (environment) · mediatek-mt6989 (environment) · mediatek-mt6989t (environment) · mediatek-mt6990 (environment) · mediatek-mt6991 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8673 (environment) · mediatek-mt8675 (environment) · mediatek-mt8676 (environment) · mediatek-mt8678 (environment) · mediatek-mt8765 (environment) · mediatek-mt8766 (environment) · mediatek-mt8766r (environment) · mediatek-mt8768 (environment) · mediatek-mt8771 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment) · mediatek-mt8788e (environment) · mediatek-mt8791 (environment) · mediatek-mt8791t (environment) · mediatek-mt8792 (environment) · mediatek-mt8793 (environment) · mediatek-mt8795t (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment) · mediatek-mt8863 (environment) · mediatek-mt8873 (environment) · mediatek-mt8883 (environment) · mediatek-mt8893 (environment)
All versions
mediatek-mt2735 (environment) · mediatek-mt2737 (environment) · mediatek-mt6739 (environment) · mediatek-mt6761 (environment) · mediatek-mt6762 (environment) · mediatek-mt6762d (environment) · mediatek-mt6762m (environment) · mediatek-mt6763 (environment) · mediatek-mt6765 (environment) · mediatek-mt6765t (environment) · mediatek-mt6767 (environment) · mediatek-mt6768 (environment) · mediatek-mt6769 (environment) · mediatek-mt6769k (environment) · mediatek-mt6769s (environment) · mediatek-mt6769t (environment) · mediatek-mt6769z (environment) · mediatek-mt6771 (environment) · mediatek-mt6813 (environment) · mediatek-mt6833 (environment) · mediatek-mt6833p (environment) · mediatek-mt6835 (environment) · mediatek-mt6835t (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6855 (environment) · mediatek-mt6855t (environment) · mediatek-mt6873 (environment) · mediatek-mt6875 (environment) · mediatek-mt6875t (environment) · mediatek-mt6877 (environment) · mediatek-mt6877t (environment) · mediatek-mt6877tt (environment) · mediatek-mt6878 (environment) · mediatek-mt6878m (environment) · mediatek-mt6879 (environment) · mediatek-mt6880 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6886 (environment) · mediatek-mt6889 (environment) · mediatek-mt6890 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6895tt (environment) · mediatek-mt6896 (environment) · mediatek-mt6897 (environment) · mediatek-mt6899 (environment) · mediatek-mt6980 (environment) · mediatek-mt6980d (environment) · mediatek-mt6983 (environment) · mediatek-mt6983t (environment) · mediatek-mt6985 (environment) · mediatek-mt6985t (environment) · mediatek-mt6989 (environment) · mediatek-mt6989t (environment) · mediatek-mt6990 (environment) · mediatek-mt6991 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8673 (environment) · mediatek-mt8675 (environment) · mediatek-mt8676 (environment) · mediatek-mt8678 (environment) · mediatek-mt8765 (environment) · mediatek-mt8766 (environment) · mediatek-mt8766r (environment) · mediatek-mt8768 (environment) · mediatek-mt8771 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment) · mediatek-mt8788e (environment) · mediatek-mt8791 (environment) · mediatek-mt8791t (environment) · mediatek-mt8792 (environment) · mediatek-mt8793 (environment) · mediatek-mt8795t (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment) · mediatek-mt8863 (environment) · mediatek-mt8873 (environment) · mediatek-mt8883 (environment) · mediatek-mt8893 (environment)
All versions
mediatek-mt2735 (environment) · mediatek-mt2737 (environment) · mediatek-mt6739 (environment) · mediatek-mt6761 (environment) · mediatek-mt6762 (environment) · mediatek-mt6762d (environment) · mediatek-mt6762m (environment) · mediatek-mt6763 (environment) · mediatek-mt6765 (environment) · mediatek-mt6765t (environment) · mediatek-mt6767 (environment) · mediatek-mt6768 (environment) · mediatek-mt6769 (environment) · mediatek-mt6769k (environment) · mediatek-mt6769s (environment) · mediatek-mt6769t (environment) · mediatek-mt6769z (environment) · mediatek-mt6771 (environment) · mediatek-mt6813 (environment) · mediatek-mt6833 (environment) · mediatek-mt6833p (environment) · mediatek-mt6835 (environment) · mediatek-mt6835t (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6855 (environment) · mediatek-mt6855t (environment) · mediatek-mt6873 (environment) · mediatek-mt6875 (environment) · mediatek-mt6875t (environment) · mediatek-mt6877 (environment) · mediatek-mt6877t (environment) · mediatek-mt6877tt (environment) · mediatek-mt6878 (environment) · mediatek-mt6878m (environment) · mediatek-mt6879 (environment) · mediatek-mt6880 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6886 (environment) · mediatek-mt6889 (environment) · mediatek-mt6890 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6895tt (environment) · mediatek-mt6896 (environment) · mediatek-mt6897 (environment) · mediatek-mt6899 (environment) · mediatek-mt6980 (environment) · mediatek-mt6980d (environment) · mediatek-mt6983 (environment) · mediatek-mt6983t (environment) · mediatek-mt6985 (environment) · mediatek-mt6985t (environment) · mediatek-mt6989 (environment) · mediatek-mt6989t (environment) · mediatek-mt6990 (environment) · mediatek-mt6991 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8673 (environment) · mediatek-mt8675 (environment) · mediatek-mt8676 (environment) · mediatek-mt8678 (environment) · mediatek-mt8765 (environment) · mediatek-mt8766 (environment) · mediatek-mt8766r (environment) · mediatek-mt8768 (environment) · mediatek-mt8771 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment) · mediatek-mt8788e (environment) · mediatek-mt8791 (environment) · mediatek-mt8791t (environment) · mediatek-mt8792 (environment) · mediatek-mt8793 (environment) · mediatek-mt8795t (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment) · mediatek-mt8863 (environment) · mediatek-mt8873 (environment) · mediatek-mt8883 (environment) · mediatek-mt8893 (environment)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
SSVC — Action Prioritization
SSVCNo known exploitAutomatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
8.1HIGHCISA-ADP
- Attack Vector
- NETWORK
- Complexity
- HIGH
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-787
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card