Vulnerabilidades do Mediatek Mt8788 Firmware

CVE-2026-20544 Média · 6.8 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt8910 Firmware

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20543 Média · 5.5 CWE-215 04/10/2026

In Modem, there is a possible information disclosure due to a logic error. This could…

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

CVE-2026-20541 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

CVE-2026-20540 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

CVE-2026-20539 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.

CVE-2026-20538 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

CVE-2026-20534 Média · 5.3 CWE-125 04/10/2026

Out-of-bounds Read em Mediatek Mt2716 Firmware

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

CVE-2026-20455 Alta · 7.8 CWE-787 01/06/2026

Out-of-bounds Write em Mediatek Mt6739 Firmware

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784.

CVE-2026-20454 Média · 6.4 CWE-367 01/06/2026

TOCTOU Race Condition em Mediatek Mt8673 Firmware

In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6786.

CVE-2026-20453 Média · 6.7 CWE-787 01/06/2026

Out-of-bounds Write em Mediatek Mt8673 Firmware

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791.