Mediatek Mt8395 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mediatek Mt8395 Firmware: 11 record(s), with affected versions and fixes.cpe:2.3:o:mediatek:mt8395_firmware
CVE-2026-20589
Medium · 6.7
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
CVE-2026-20588
Medium · 6.7
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
CVE-2026-20587
Medium · 6.7
CWE-843 Oct 4, 2026
Type Confusion in Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
CVE-2026-20586
High · 8.8
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt8910 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
CVE-2026-20579
Medium · 6.7
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
CVE-2026-20542
Medium · 6.7
CWE-416 Oct 4, 2026
Use After Free in Mediatek Mt2718 Firmware
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.
CVE-2026-20521
High · 8.4
CWE-121 Oct 4, 2026
Stack-based Buffer Overflow in Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20502
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20486
Medium · 6.7
CWE-754 Aug 3, 2026
Improper Check for Unusual or Exceptional Conditions in Mediatek Mt8910 Firmware
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
CVE-2026-20451
Medium · 6.7
CWE-843 May 4, 2026
Type Confusion in Mediatek Mt8115 Firmware
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.