Vulnerabilidades do Mediatek Mt8673 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Mediatek Mt8673 Firmware: 14 registro(s), com versões afetadas e correções.cpe:2.3:o:mediatek:mt8673_firmware
CVE-2026-20543
Média · 5.5
CWE-215 04/10/2026
In Modem, there is a possible information disclosure due to a logic error. This could…
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.
CVE-2026-20541
Média · 5.3
CWE-126 04/10/2026
In Modem, there is a possible out of bounds read due to a missing permission check. This…
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.
CVE-2026-20540
Média · 5.3
CWE-126 04/10/2026
In Modem, there is a possible out of bounds read due to a missing bounds check. This…
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.
CVE-2026-20539
Média · 5.3
CWE-126 04/10/2026
In Modem, there is a possible out of bounds read due to a missing bounds check. This…
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.
CVE-2026-20538
Média · 5.3
CWE-126 04/10/2026
In Modem, there is a possible out of bounds read due to a missing permission check. This…
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.
CVE-2026-20534
Média · 5.3
CWE-125 04/10/2026
Out-of-bounds Read em Mediatek Mt2716 Firmware
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.
CVE-2026-20503
Média · 5.3
CWE-617 06/09/2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20455
Alta · 7.8
CWE-787 01/06/2026
Out-of-bounds Write em Mediatek Mt6739 Firmware
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.
CVE-2026-20454
Média · 6.4
CWE-367 01/06/2026
TOCTOU Race Condition em Mediatek Mt8673 Firmware
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.
CVE-2026-20453
Média · 6.7
CWE-787 01/06/2026
Out-of-bounds Write em Mediatek Mt8673 Firmware
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.
CVE-2026-20450
Média · 6.5
CWE-617 04/05/2026
In Modem, there is a possible system crash due to incorrect error handling. This could…
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
CVE-2026-20449
Média · 6.5
CWE-120 04/05/2026
Classic Buffer Overflow em Mediatek Mt6763 Firmware
In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.
CVE-2026-20433
Alta · 8.8
CWE-787 07/04/2026
Out-of-bounds Write em Mediatek Mt2735 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
CVE-2026-20432
Alta · 8.0
CWE-787 07/04/2026
Out-of-bounds Write em Mediatek Mt2735 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.