CVE-2025-20659
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 7, 2025
Updated: Apr 11, 2025
CWE ID 125
Summary
CVE-2025-20659 is a vulnerability affecting Modem software. The issue arises from inadequate input validation, potentially causing a system crash. An attacker can exploit this flaw by connecting a UE to a rogue base station under their control, leading to a remote denial-of-service attack. No additional execution privileges or user interaction are required for successful exploitation. The patch for this vulnerability is identified as MOLY01519028, and its internal issue reference is MSV-2768.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.