Mediatek Mt8765 Firmware vulnerabilities

CVE-2026-20543 Medium · 5.5 CWE-215 Oct 4, 2026

In Modem, there is a possible information disclosure due to a logic error. This could…

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

CVE-2026-20541 Medium · 5.3 CWE-126 Oct 4, 2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

CVE-2026-20540 Medium · 5.3 CWE-126 Oct 4, 2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

CVE-2026-20539 Medium · 5.3 CWE-126 Oct 4, 2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.

CVE-2026-20538 Medium · 5.3 CWE-126 Oct 4, 2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

CVE-2026-20534 Medium · 5.3 CWE-125 Oct 4, 2026

Out-of-bounds Read in Mediatek Mt2716 Firmware

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

CVE-2026-20455 High · 7.8 CWE-787 Jun 1, 2026

Out-of-bounds Write in Mediatek Mt6739 Firmware

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.

CVE-2026-20454 Medium · 6.4 CWE-367 Jun 1, 2026

TOCTOU Race Condition in Mediatek Mt8673 Firmware

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.

CVE-2026-20453 Medium · 6.7 CWE-787 Jun 1, 2026

Out-of-bounds Write in Mediatek Mt8673 Firmware

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.