Vulnerabilidades do Mediatek Mt8863 Firmware

CVE-2026-20544 Média · 6.8 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt8910 Firmware

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20543 Média · 5.5 CWE-215 04/10/2026

In Modem, there is a possible information disclosure due to a logic error. This could…

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

CVE-2026-20541 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

CVE-2026-20540 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

CVE-2026-20539 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This…

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8913.

CVE-2026-20538 Média · 5.3 CWE-126 04/10/2026

In Modem, there is a possible out of bounds read due to a missing permission check. This…

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8914.

CVE-2026-20534 Média · 5.3 CWE-125 04/10/2026

Out-of-bounds Read em Mediatek Mt2716 Firmware

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

CVE-2026-20527 Média · 5.3 CWE-129 04/10/2026

In Modem, there is a possible system crash due to a missing bounds check. This could…

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01864925 / MOLY01210562; Issue ID: MSV-8303.

CVE-2026-20526 Alta · 7.5 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2716 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906.

CVE-2026-20525 Média · 5.3 CWE-617 04/10/2026

In Modem, there is a possible system crash due to improper input validation. This could…

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.

CVE-2026-20520 Alta · 7.5 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt2716 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.

CVE-2026-20519 Alta · 7.5 CWE-787 04/10/2026

Out-of-bounds Write em Mediatek Mt6833 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.

CVE-2026-20503 Média · 5.3 CWE-617 06/09/2026

In Modem, there is a possible system crash due to a missing bounds check. This could…

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.

CVE-2026-20500 Média · 5.5 CWE-295 06/09/2026

Improper Certificate Validation em Mediatek Mt2716 Firmware

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.

CVE-2026-20450 Média · 6.5 CWE-617 04/05/2026

In Modem, there is a possible system crash due to incorrect error handling. This could…

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

CVE-2026-20449 Média · 6.5 CWE-120 04/05/2026

Classic Buffer Overflow em Mediatek Mt6763 Firmware

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

CVE-2026-20433 Alta · 8.8 CWE-787 07/04/2026

Out-of-bounds Write em Mediatek Mt2735 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

CVE-2026-20432 Alta · 8.0 CWE-787 07/04/2026

Out-of-bounds Write em Mediatek Mt2735 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

CVE-2026-20431 Média · 6.5 CWE-770 07/04/2026

Allocation of Resources Without Limits or Throttling em Mediatek Mt6813 Firmware

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.