Mediatek vulnerabilities
Published CVEs affecting Mediatek products: 245 record(s), with severity, exploitation and fixes.
MediaTek chipset 174Mt6991 Firmware 45Mt6993 Firmware 44Mt8668 Firmware 44Mt8793 Firmware 41Mt8781 Firmware 41Mt8678 Firmware 40Mt6899 Firmware 37Mt8676 Firmware 37Mt8792 Firmware 37Mt6989 Firmware 35Mt6877 Firmware 34Mt8910 Firmware 34Mt6878 Firmware 33Mt8791t Firmware 33Mt6855 Firmware 32Software Development Kit 31Nr15 30Mt6897 Firmware 30Mt6833 Firmware 28Mt6835 Firmware 28Mt6853 Firmware 28Mt6893 Firmware 28Mt6883 Firmware 27Mt6885 Firmware 27Mt6889 Firmware 27Mt6895 Firmware 26Mt6983 Firmware 26Mt6985 Firmware 26Mt8775 Firmware 26Mt8188 Firmware 26Mt6879 Firmware 25Mt6886 Firmware 25Mt6890 Firmware 25Mt6768 Firmware 25Mt6789 Firmware 25Mt6988 Firmware 24Mt8189 Firmware 24Mt8768 Firmware 24Mt6881 Firmware 23
CVE-2026-20524
High · 8.4
CWE-1285 Oct 4, 2026
In apu, there is a possible memory corruption due to improper input validation. This…
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
CVE-2026-20523
High · 8.4
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt6881 Firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
CVE-2026-20522
High · 8.4
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt6881 Firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
CVE-2026-20521
High · 8.4
CWE-121 Oct 4, 2026
Stack-based Buffer Overflow in Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20520
High · 7.5
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt2716 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.
CVE-2026-20519
High · 7.5
CWE-787 Oct 4, 2026
Out-of-bounds Write in Mediatek Mt6833 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.
CVE-2026-20518
Medium · 4.4
CWE-125 Sep 6, 2026
Out-of-bounds Read in Mediatek MediaTek chipset
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID: MSV-6674.
CVE-2026-20517
Medium · 6.7
CWE-416 Sep 6, 2026
Use After Free in Mediatek MediaTek chipset
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781.
CVE-2026-20516
Medium · 5.5
CWE-926 Sep 6, 2026
In MiracastService, there is a possible escalation of privilege due to a confused…
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
CVE-2026-20515
Medium · 5.5
CWE-416 Sep 6, 2026
Use After Free in Mediatek MediaTek chipset
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.
CVE-2026-20514
Medium · 4.4
CWE-307 Sep 6, 2026
Improper Restriction of Excessive Authentication Attempts in Mediatek MediaTek chipset
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.
CVE-2026-20513
Medium · 4.4
CWE-35 Sep 6, 2026
In Audio HAL, there is a possible information disclosure due to improper input…
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
CVE-2026-20512
Medium · 6.7
CWE-307 Sep 6, 2026
Improper Restriction of Excessive Authentication Attempts in Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.
CVE-2026-20511
Medium · 6.7
CWE-416 Sep 6, 2026
Use After Free in Mediatek MediaTek chipset
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.
CVE-2026-20510
Medium · 6.7
CWE-415 Sep 6, 2026
Double Free in Mediatek MediaTek chipset
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894.
CVE-2026-20509
Medium · 6.7
CWE-121 Sep 6, 2026
Stack-based Buffer Overflow in Mediatek MediaTek chipset
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011.
CVE-2026-20508
Medium · 6.7
CWE-843 Sep 6, 2026
Type Confusion in Mediatek MediaTek chipset
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.
CVE-2026-20507
Medium · 6.7
CWE-416 Sep 6, 2026
Use After Free in Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125.
CVE-2026-20506
Medium · 6.7
CWE-416 Sep 6, 2026
Use After Free in Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126.
CVE-2026-20504
Medium · 5.3
CWE-617 Sep 6, 2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.
CVE-2026-20503
Medium · 5.3
CWE-617 Sep 6, 2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20502
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501
High · 8.4
CWE-122 Sep 6, 2026
Heap-based Buffer Overflow in Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20500
Medium · 5.5
CWE-295 Sep 6, 2026
Improper Certificate Validation in Mediatek Mt2716 Firmware
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
CVE-2026-20498
Medium · 6.0
CWE-1287 Aug 3, 2026
In geniezone, there is a possible escalation of privilege due to a missing permission…
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.