CVE Intelligence

Mediatek Mt8696 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mediatek Mt8696 Firmware: 12 record(s), with affected versions and fixes.
cpe:2.3:o:mediatek:mt8696_firmware

CVE-2026-20589 Medium · 6.7 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
CVE-2026-20588 Medium · 6.7 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
CVE-2026-20587 Medium · 6.7 CWE-843 Oct 4, 2026
Type Confusion in Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
CVE-2026-20586 High · 8.8 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt8910 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
CVE-2026-20579 Medium · 6.7 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
CVE-2026-20536 Medium · 6.7 CWE-416 Oct 4, 2026
Use After Free in Mediatek Mt6878 Firmware
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
CVE-2026-20521 High · 8.4 CWE-121 Oct 4, 2026
Stack-based Buffer Overflow in Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20520 High · 7.5 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2716 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.
CVE-2026-20519 High · 7.5 CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt6833 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.
CVE-2026-20502 High · 8.4 CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501 High · 8.4 CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20484 Medium · 4.4 CWE-201 Aug 3, 2026
Insertion of Sensitive Information Into Sent Data in Mediatek Mt8799 Firmware
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.