Mediatek Nr16 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mediatek Nr16: 19 record(s), with affected versions and fixes.cpe:2.3:o:mediatek:nr16
CVE-2026-20434
High · 7.5
CWE-787 Mar 2, 2026
Out-of-bounds Write in Mediatek Lr12a
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.
CVE-2026-20422
Medium · 6.5
CWE-617 Feb 2, 2026
In Modem, there is a possible system crash due to improper input validation. This could…
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.
CVE-2026-20420
Medium · 6.5
CWE-125 Feb 2, 2026
Out-of-bounds Read in Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738313; Issue ID: MSV-5935.
CVE-2026-20406
Medium · 6.5
CWE-754 Feb 2, 2026
Improper Check for Unusual or Exceptional Conditions in Mediatek Nr15
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.
CVE-2026-20405
Medium · 6.5
CWE-617 Feb 2, 2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01688495; Issue ID: MSV-4818.
CVE-2026-20404
Medium · 6.5
CWE-787 Feb 2, 2026
Out-of-bounds Write in Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689248; Issue ID: MSV-4837.
CVE-2026-20403
Medium · 6.5
CWE-787 Feb 2, 2026
Out-of-bounds Write in Mediatek Nr15
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689254 (Note: For N15 and NR16) / MOLY01689259 (Note: For NR17 and NR17R); Issue ID: MSV-4843.
CVE-2025-20794
Medium · 6.5
CWE-121 Jan 5, 2026
Stack-based Buffer Overflow in Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.
CVE-2025-20793
Medium · 6.5
CWE-476 Jan 5, 2026
NULL Pointer Dereference in Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01430930; Issue ID: MSV-4836.
CVE-2025-20761
Medium · 6.5
CWE-754 Jan 5, 2026
Improper Check for Unusual or Exceptional Conditions in Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.
CVE-2025-20760
Medium · 6.5
CWE-617 Jan 5, 2026
In Modem, there is a possible read of uninitialized heap data due to an uncaught…
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01676750; Issue ID: MSV-4653.
CVE-2025-20759
Medium · 6.5
CWE-125 Dec 2, 2025
Out-of-bounds Read in Mediatek Nr15
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673760; Issue ID: MSV-4650.
CVE-2025-20758
Medium · 4.9
CWE-248 Dec 2, 2025
In Modem, there is a possible system crash due to an uncaught exception. This could lead…
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01673755; Issue ID: MSV-4647.
CVE-2025-20754
Medium · 5.3
CWE-248 Dec 2, 2025
In Modem, there is a possible system crash due to an incorrect bounds check. This could…
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689251; Issue ID: MSV-4840.
CVE-2025-20753
Medium · 5.3
CWE-248 Dec 2, 2025
In Modem, there is a possible system crash due to an uncaught exception. This could lead…
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689252; Issue ID: MSV-4841.
CVE-2025-20752
Medium · 6.5
CWE-617 Dec 2, 2025
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01270690; Issue ID: MSV-4301.
CVE-2025-20727
High · 8.1
CWE-787 Nov 4, 2025
Out-of-bounds Write in Mediatek Lr12a
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623.
CVE-2025-20726
High · 7.5
CWE-787 Nov 4, 2025
Out-of-bounds Write in Mediatek Lr12a
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.
CVE-2025-20725
High · 7.5
CWE-787 Nov 4, 2025
Out-of-bounds Write in Mediatek Lr12a
In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.