Mediatek MediaTek chipset vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mediatek MediaTek chipset: 174 record(s), with affected versions and fixes.
CVE-2025-20803
Medium · 6.7
CWE-190 Jan 5, 2026
Integer Overflow or Wraparound in Google Android
In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10199779; Issue ID: MSV-4504.
CVE-2025-20802
Medium · 6.7
CWE-416 Jan 5, 2026
Use After Free in Google Android
In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10238968; Issue ID: MSV-4914.
CVE-2025-20801
High · 7.0
CWE-415 Jan 5, 2026
Double Free in Google Android
In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210; Issue ID: MSV-4926.
CVE-2025-20800
High · 7.8
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267349; Issue ID: MSV-5033.
CVE-2025-20799
High · 7.8
CWE-416 Jan 5, 2026
Use After Free in Google Android
In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049.
CVE-2025-20798
High · 7.8
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5533.
CVE-2025-20797
High · 7.8
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5534.
CVE-2025-20796
High · 7.8
CWE-1285 Jan 5, 2026
In imgsys, there is a possible out of bounds write due to improper input validation…
In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553.
CVE-2025-20795
High · 7.8
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141.
CVE-2025-20794
Medium · 6.5
CWE-121 Jan 5, 2026
Stack-based Buffer Overflow in Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.
CVE-2025-20793
Medium · 6.5
CWE-476 Jan 5, 2026
NULL Pointer Dereference in Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01430930; Issue ID: MSV-4836.
CVE-2025-20787
Medium · 6.7
CWE-416 Jan 5, 2026
Use After Free in Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658.
CVE-2025-20786
Medium · 6.7
CWE-415 Jan 5, 2026
Double Free in Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4673.
CVE-2025-20785
Medium · 6.7
CWE-416 Jan 5, 2026
Use After Free in Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4677.
CVE-2025-20784
Medium · 6.7
CWE-457 Jan 5, 2026
Use of Uninitialized Variable in Google Android
In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4683.
CVE-2025-20783
Medium · 6.7
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4684.
CVE-2025-20782
Medium · 6.7
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4685.
CVE-2025-20781
High · 7.8
CWE-415 Jan 5, 2026
Double Free in Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4699.
CVE-2025-20780
High · 7.8
CWE-416 Jan 5, 2026
Use After Free in Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712.
CVE-2025-20779
High · 7.0
CWE-416 Jan 5, 2026
Use After Free in Google Android
In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Issue ID: MSV-4720.
CVE-2025-20778
High · 7.8
CWE-787 Jan 5, 2026
Out-of-bounds Write in Google Android
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4729.
CVE-2025-20762
Medium · 6.5
CWE-617 Jan 5, 2026
In Modem, there is a possible system crash due to incorrect error handling. This could…
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.
CVE-2025-20761
Medium · 6.5
CWE-754 Jan 5, 2026
Improper Check for Unusual or Exceptional Conditions in Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.
CVE-2025-20760
Medium · 6.5
CWE-617 Jan 5, 2026
In Modem, there is a possible read of uninitialized heap data due to an uncaught…
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01676750; Issue ID: MSV-4653.