Skip to main content

Lr13 EUVDEUVD-2025-16595

| CVE-2025-20678 MEDIUM
Uncontrolled Recursion (CWE-674)
2025-06-02 security@mediatek.com
Denial Of Service Lr13 Lr12a Nr17 Nr15 Nr16 Nr17r
6.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.5 MEDIUM
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
EUVD ID Assigned
Mar 14, 2026 - 16:47 euvd
EUVD-2025-16595
Analysis Generated
Mar 14, 2026 - 16:47 vuln.today
CVE Published
Jun 02, 2025 - 03:15 nvd
MEDIUM 6.5

DescriptionCVE.org

In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739.

Analysis

In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739.

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Uncontrolled Recursion (CWE-674).

RemediationAI

Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

More in Lr13

View all
CVE-2023-32874 CRITICAL
9.8 Jan 02

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS
CVE-2023-20819 CRITICAL
9.8 Oct 02

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CV
CVE-2022-21744 CRITICAL
9.8 Jul 06

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS 9.8
CVE-2022-20083 CRITICAL
9.8 Jul 06

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. Rated critical severity (CVSS

CVE-2024-20039 HIGH
8.8 Apr 01

In modem protocol, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8)
CVE-2025-20667 HIGH
7.5 May 05

In Modem, there is a possible information disclosure due to incorrect error handling. Rated high severity (CVSS 7.5), th
CVE-2023-32890 HIGH
7.5 Jan 02

In modem EMM, there is a possible system crash due to improper input validation. Rated high severity (CVSS 7.5), this vu
CVE-2026-20434 HIGH
7.5 Mar 02

Privilege escalation in Modem affects Nr17, Lr13, Nr16, Lr12a, and Nr15 devices through an out-of-bounds write vulnerabi
CVE-2022-26446 HIGH
7.5 Nov 08

In Modem 4G RRC, there is a possible system crash due to improper input validation. Rated high severity (CVSS 7.5), this
CVE-2023-32891 MEDIUM
6.7 Jan 02

In bluetooth service, there is a possible out of bounds write due to improper input validation. Rated medium severity (C
CVE-2024-20154 HIGH
8.8 Jan 06

In Modem, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8), this vu
CVE-2024-20150 HIGH
7.5 Jan 06

In Modem, there is a possible system crash due to a logic error. Rated high severity (CVSS 7.5), this vulnerability is r

Same weakness CWE-674 – Uncontrolled Recursion

View all
CVE-2019-9545 HIGH POC
8.8
CVE-2019-9543 HIGH POC
8.8
CVE-2019-9144 HIGH POC
8.8
CVE-2019-9143 HIGH POC
8.8
CVE-2025-9624 HIGH POC
8.3
CVE-2019-9192 HIGH POC
7.5
CVE-2021-28210 HIGH POC
7.8
CVE-2018-9918 HIGH POC
7.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

EUVD-2025-16595 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy