Vulnerabilidades do Mediatek Mt8126 Firmware

CVE-2026-20544 Média · 6.8 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt8910 Firmware

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20530 Média · 6.7 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2718 Firmware

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.

CVE-2026-20521 Alta · 8.4 CWE-121 04/10/2026

Stack-based Buffer Overflow em Mediatek Mt8910 Firmware

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

CVE-2026-20502 Alta · 8.4 CWE-122 06/09/2026

Heap-based Buffer Overflow em Mediatek Mt2718 Firmware

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.

CVE-2026-20501 Alta · 8.4 CWE-122 06/09/2026

Heap-based Buffer Overflow em Mediatek Mt2718 Firmware

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.

CVE-2026-20489 Média · 4.4 CWE-125 03/08/2026

Out-of-bounds Read em Mediatek Mt6991 Firmware

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.

CVE-2026-20488 Média · 4.4 CWE-125 03/08/2026

Out-of-bounds Read em Mediatek Mt6991 Firmware

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

CVE-2026-20475 Média · 6.0 CWE-787 03/08/2026

Out-of-bounds Write em Mediatek Mt8910 Firmware

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

CVE-2026-20474 Média · 6.0 CWE-367 03/08/2026

TOCTOU Race Condition em Mediatek Mt6991 Firmware

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

CVE-2026-20473 Média · 6.0 CWE-416 03/08/2026

Use After Free em Mediatek Mt6991 Firmware

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.