MediaTek NR17R vulnerabilities

20 CVEs affecting MediaTek NR17R, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20422, published 2026-02-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-20634, published 2025-02-03. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2025-20727, published 2025-11-04. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20726, published 2025-11-04. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20758, published 2025-12-02. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no…
CVE-2026-20404, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2025-20754, published 2025-12-02. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2025-20667, published 2025-05-05. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20678, published 2025-06-02. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20708, published 2025-09-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the…
CVE-2025-20670, published 2025-05-05. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by…

Latest

CVE-2026-20422, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2026-20420, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with…
CVE-2026-20406, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no…
CVE-2026-20405, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with…
CVE-2026-20403, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with…
CVE-2025-20794, published 2026-01-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,…
CVE-2025-20793, published 2026-01-06. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with…