Vulnerabilidades de Mediatek
CVEs publicadas que afetam produtos de Mediatek: 243 registro(s), com severidade, exploração e correções.
MediaTek chipset 172Mt6991 Firmware 45Mt6993 Firmware 44Mt8668 Firmware 44Mt8793 Firmware 41Mt8781 Firmware 41Mt8678 Firmware 40Mt6899 Firmware 37Mt8676 Firmware 37Mt8792 Firmware 37Mt6989 Firmware 35Mt6877 Firmware 34Mt8910 Firmware 34Mt6878 Firmware 33Mt8791t Firmware 33Mt6855 Firmware 32Software Development Kit 31Nr15 30Mt6897 Firmware 30Mt6833 Firmware 28Mt6835 Firmware 28Mt6853 Firmware 28Mt6893 Firmware 28Mt6883 Firmware 27Mt6885 Firmware 27Mt6889 Firmware 27Mt6895 Firmware 26Mt6983 Firmware 26Mt6985 Firmware 26Mt8775 Firmware 26Mt8188 Firmware 26Mt6879 Firmware 25Mt6886 Firmware 25Mt6890 Firmware 25Mt6768 Firmware 25Mt6789 Firmware 25Mt6988 Firmware 24Mt8189 Firmware 24Mt8768 Firmware 24Mt6881 Firmware 23
CVE-2026-20524
Alta · 8.4
CWE-1285 04/10/2026
In apu, there is a possible memory corruption due to improper input validation. This…
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
CVE-2026-20523
Alta · 8.4
CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt6881 Firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
CVE-2026-20522
Alta · 8.4
CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt6881 Firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
CVE-2026-20521
Alta · 8.4
CWE-121 04/10/2026
Stack-based Buffer Overflow em Mediatek Mt8910 Firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
CVE-2026-20520
Alta · 7.5
CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt2716 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.
CVE-2026-20519
Alta · 7.5
CWE-787 04/10/2026
Out-of-bounds Write em Mediatek Mt6833 Firmware
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.
CVE-2026-20518
Média · 4.4
CWE-125 06/09/2026
Out-of-bounds Read em Mediatek MediaTek chipset
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID: MSV-6674.
CVE-2026-20517
Média · 6.7
CWE-416 06/09/2026
Use After Free em Mediatek MediaTek chipset
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781.
CVE-2026-20516
Média · 5.5
CWE-926 06/09/2026
In MiracastService, there is a possible escalation of privilege due to a confused…
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882.
CVE-2026-20515
Média · 5.5
CWE-416 06/09/2026
Use After Free em Mediatek MediaTek chipset
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132.
CVE-2026-20514
Média · 4.4
CWE-307 06/09/2026
Improper Restriction of Excessive Authentication Attempts em Mediatek MediaTek chipset
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244.
CVE-2026-20513
Média · 4.4
CWE-35 06/09/2026
In Audio HAL, there is a possible information disclosure due to improper input…
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
CVE-2026-20512
Média · 6.7
CWE-307 06/09/2026
Improper Restriction of Excessive Authentication Attempts em Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.
CVE-2026-20511
Média · 6.7
CWE-416 06/09/2026
Use After Free em Mediatek MediaTek chipset
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890.
CVE-2026-20510
Média · 6.7
CWE-415 06/09/2026
Double Free em Mediatek MediaTek chipset
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894.
CVE-2026-20509
Média · 6.7
CWE-121 06/09/2026
Stack-based Buffer Overflow em Mediatek MediaTek chipset
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011.
CVE-2026-20508
Média · 6.7
CWE-843 06/09/2026
Type Confusion em Mediatek MediaTek chipset
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9012.
CVE-2026-20507
Média · 6.7
CWE-416 06/09/2026
Use After Free em Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125.
CVE-2026-20506
Média · 6.7
CWE-416 06/09/2026
Use After Free em Mediatek MediaTek chipset
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126.
CVE-2026-20504
Média · 5.3
CWE-617 06/09/2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.
CVE-2026-20503
Média · 5.3
CWE-617 06/09/2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
CVE-2026-20502
Alta · 8.4
CWE-122 06/09/2026
Heap-based Buffer Overflow em Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
CVE-2026-20501
Alta · 8.4
CWE-122 06/09/2026
Heap-based Buffer Overflow em Mediatek Mt2718 Firmware
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
CVE-2026-20500
Média · 5.5
CWE-295 06/09/2026
Improper Certificate Validation em Mediatek Mt2716 Firmware
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
CVE-2026-20498
Média · 6.0
CWE-1287 03/08/2026
In geniezone, there is a possible escalation of privilege due to a missing permission…
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.