Vulnerabilidades do Mediatek Mt8395 Firmware

CVE-2026-20589 Média · 6.7 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2718 Firmware

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.

CVE-2026-20588 Média · 6.7 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2718 Firmware

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.

CVE-2026-20587 Média · 6.7 CWE-843 04/10/2026

Type Confusion em Mediatek Mt2718 Firmware

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.

CVE-2026-20586 Alta · 8.8 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt8910 Firmware

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

CVE-2026-20579 Média · 6.7 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2718 Firmware

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.

CVE-2026-20542 Média · 6.7 CWE-416 04/10/2026

Use After Free em Mediatek Mt2718 Firmware

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11076799; Issue ID: MSV-8143.

CVE-2026-20521 Alta · 8.4 CWE-121 04/10/2026

Stack-based Buffer Overflow em Mediatek Mt8910 Firmware

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

CVE-2026-20502 Alta · 8.4 CWE-122 06/09/2026

Heap-based Buffer Overflow em Mediatek Mt2718 Firmware

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.

CVE-2026-20501 Alta · 8.4 CWE-122 06/09/2026

Heap-based Buffer Overflow em Mediatek Mt2718 Firmware

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.

CVE-2026-20486 Média · 6.7 CWE-754 03/08/2026

Improper Check for Unusual or Exceptional Conditions em Mediatek Mt8910 Firmware

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

CVE-2026-20451 Média · 6.7 CWE-843 04/05/2026

Type Confusion em Mediatek Mt8115 Firmware

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.