Vulnerabilidades de Mediatek

CVE-2026-20432 Alta · 8.0 CWE-787 07/04/2026

Out-of-bounds Write em Mediatek Mt2735 Firmware

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

CVE-2026-20431 Média · 6.5 CWE-770 07/04/2026

Allocation of Resources Without Limits or Throttling em Mediatek Mt6813 Firmware

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

CVE-2026-20445 Média · 4.4 CWE-367 02/03/2026

TOCTOU Race Condition em Google Android

In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10289875; Issue ID: MSV-5184.

CVE-2026-20444 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721.

CVE-2026-20443 Média · 6.7 CWE-416 02/03/2026

Use After Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5722.

CVE-2026-20442 Média · 4.4 CWE-416 02/03/2026

Use After Free em Google Android

In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436998; Issue ID: MSV-5723.

CVE-2026-20441 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803.

CVE-2026-20440 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824.

CVE-2026-20439 Média · 4.4 CWE-416 02/03/2026

Use After Free em Google Android

In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431955; Issue ID: MSV-5826.

CVE-2026-20438 Média · 6.4 CWE-367 02/03/2026

TOCTOU Race Condition em Google Android

In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.

CVE-2026-20437 Média · 4.4 CWE-416 02/03/2026

Use After Free em Google Android

In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431940; Issue ID: MSV-5843.

CVE-2026-20436 Média · 6.7 CWE-120 02/03/2026

Classic Buffer Overflow em Mediatek Nbiot Sdk

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00473802; Issue ID: MSV-5970.

CVE-2026-20435 Média · 4.6 CWE-522 02/03/2026

Insufficiently Protected Credentials em Linuxfoundation Yocto

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

CVE-2026-20434 Alta · 7.5 CWE-787 02/03/2026

Out-of-bounds Write em Mediatek Lr12a

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.

CVE-2026-20430 Alta · 8.8 CWE-787 02/03/2026

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

CVE-2026-20429 Média · 4.4 CWE-125 02/03/2026

Out-of-bounds Read em Google Android

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5535.

CVE-2026-20428 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536.

CVE-2026-20427 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537.

CVE-2026-20426 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538.

CVE-2026-20425 Média · 6.7 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539.

CVE-2026-20424 Média · 4.4 CWE-125 02/03/2026

Out-of-bounds Read em Google Android

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540.

CVE-2026-20423 Alta · 7.8 CWE-787 02/03/2026

Out-of-bounds Write em Mediatek Nbiot Sdk

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956.

CVE-2026-20416 Alta · 7.2 CWE-787 02/03/2026

Out-of-bounds Write em Google Android

In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315038 / ALPS10340155; Issue ID: MSV-5155.

CVE-2026-20422 Média · 6.5 CWE-617 02/02/2026

In Modem, there is a possible system crash due to improper input validation. This could…

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.

CVE-2026-20421 Média · 6.5 CWE-125 02/02/2026

Out-of-bounds Read em Mediatek Nr15

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738293; Issue ID: MSV-5922.