CVE Intelligence

Vulnerabilidades do Mediatek Mt8799 Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Mediatek Mt8799 Firmware: 21 registro(s), com versões afetadas e correções.
cpe:2.3:o:mediatek:mt8799_firmware

CVE-2026-20589 Média · 6.7 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt2718 Firmware
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
CVE-2026-20588 Média · 6.7 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
CVE-2026-20587 Média · 6.7 CWE-843 04/10/2026
Type Confusion em Mediatek Mt2718 Firmware
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9608.
CVE-2026-20586 Alta · 8.8 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt8910 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
CVE-2026-20579 Média · 6.7 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.
CVE-2026-20544 Média · 6.8 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt8910 Firmware
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
CVE-2026-20529 Média · 6.7 CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt6761 Firmware
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
CVE-2026-20521 Alta · 8.4 CWE-121 04/10/2026
Stack-based Buffer Overflow em Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20502 Alta · 8.4 CWE-122 06/09/2026
Heap-based Buffer Overflow em Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501 Alta · 8.4 CWE-122 06/09/2026
Heap-based Buffer Overflow em Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20498 Média · 6.0 CWE-1287 03/08/2026
In geniezone, there is a possible escalation of privilege due to a missing permission…
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.
CVE-2026-20496 Média · 4.4 CWE-125 03/08/2026
Out-of-bounds Read em Mediatek Mt6983 Firmware
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.
CVE-2026-20489 Média · 4.4 CWE-125 03/08/2026
Out-of-bounds Read em Mediatek Mt6991 Firmware
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.
CVE-2026-20488 Média · 4.4 CWE-125 03/08/2026
Out-of-bounds Read em Mediatek Mt6991 Firmware
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
CVE-2026-20486 Média · 6.7 CWE-754 03/08/2026
Improper Check for Unusual or Exceptional Conditions em Mediatek Mt8910 Firmware
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
CVE-2026-20484 Média · 4.4 CWE-201 03/08/2026
Insertion of Sensitive Information Into Sent Data em Mediatek Mt8799 Firmware
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.
CVE-2026-20481 Média · 6.0 CWE-787 03/08/2026
Out-of-bounds Write em Mediatek Mt6989 Firmware
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.
CVE-2026-20477 Média · 6.0 CWE-787 03/08/2026
Out-of-bounds Write em Mediatek Mt8910 Firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
CVE-2026-20475 Média · 6.0 CWE-787 03/08/2026
Out-of-bounds Write em Mediatek Mt8910 Firmware
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.
CVE-2026-20474 Média · 6.0 CWE-367 03/08/2026
TOCTOU Race Condition em Mediatek Mt6991 Firmware
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.
CVE-2026-20473 Média · 6.0 CWE-416 03/08/2026
Use After Free em Mediatek Mt6991 Firmware
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.