CVE-2025-20634

Summary

CVE-2025-20634 is a vulnerability affecting Modem software, resulting in a potential out-of-bounds write. This issue is triggered due to a missing bounds check, allowing an attacker to execute arbitrary code, even without additional privileges, if a user equipment (UE) connects to a rogue base station controlled by the attacker. The exploitation of this vulnerability does not necessitate user interaction. The patch for this issue is identified as MOLY01289384 and the internal issue reference is MSV-2436.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.