Mediatek Mt8126 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mediatek Mt8126 Firmware: 10 record(s), with affected versions and fixes.cpe:2.3:o:mediatek:mt8126_firmware
CVE-2026-20544
Medium · 6.8
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt8910 Firmware
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
CVE-2026-20530
Medium · 6.7
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.
CVE-2026-20521
High · 8.4
CWE-121 Oct 4, 2026
Stack-based Buffer Overflow in Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20502
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20489
Medium · 4.4
CWE-125 Aug 3, 2026
Out-of-bounds Read in Mediatek Mt6991 Firmware
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
CVE-2026-20488
Medium · 4.4
CWE-125 Aug 3, 2026
Out-of-bounds Read in Mediatek Mt6991 Firmware
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
CVE-2026-20475
Medium · 6.0
CWE-787 Aug 3, 2026
Out-of-bounds Write in Mediatek Mt8910 Firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
CVE-2026-20474
Medium · 6.0
CWE-367 Aug 3, 2026
TOCTOU Race Condition in Mediatek Mt6991 Firmware
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
CVE-2026-20473
Medium · 6.0
CWE-416 Aug 3, 2026
Use After Free in Mediatek Mt6991 Firmware
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.