Reachable Assertion in MediaTek products - CVE-2025-20792

Vulnerability identifier: #VU118879

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20792

CWE-ID: CWE-617

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to execute arbitrary code.

The vulnerability exists due to improper input validation within Modem. A local application can execute arbitrary code.

MT6877
MT6893
MT6891
MT6889
MT6885
MT6883
MT6875
MT6873
MT6853T
MT6853
MT8791T
MT6890
MT6880
MT6877TT
MT6877T
MT2735
MT6875T
MT6855T
MT6855
MT6833P
MT6833

Install security update from vendor's website.

• https://corp.mediatek.com/product-security-bulletin/December-2025

• Multiple vulnerabilities in MediaTek chipsets