Vulnerabilidades de Mediatek
CVEs publicadas que afetam produtos de Mediatek: 245 registro(s), com severidade, exploração e correções.
MediaTek chipset 174Mt6991 Firmware 45Mt6993 Firmware 44Mt8668 Firmware 44Mt8793 Firmware 41Mt8781 Firmware 41Mt8678 Firmware 40Mt6899 Firmware 37Mt8676 Firmware 37Mt8792 Firmware 37Mt6989 Firmware 35Mt6877 Firmware 34Mt8910 Firmware 34Mt6878 Firmware 33Mt8791t Firmware 33Mt6855 Firmware 32Software Development Kit 31Nr15 30Mt6897 Firmware 30Mt6833 Firmware 28Mt6835 Firmware 28Mt6853 Firmware 28Mt6893 Firmware 28Mt6883 Firmware 27Mt6885 Firmware 27Mt6889 Firmware 27Mt6895 Firmware 26Mt6983 Firmware 26Mt6985 Firmware 26Mt8775 Firmware 26Mt8188 Firmware 26Mt6879 Firmware 25Mt6886 Firmware 25Mt6890 Firmware 25Mt6768 Firmware 25Mt6789 Firmware 25Mt6988 Firmware 24Mt8189 Firmware 24Mt8768 Firmware 24Mt6881 Firmware 23
CVE-2026-20422
Média · 6.5
CWE-617 02/02/2026
In Modem, there is a possible system crash due to improper input validation. This could…
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.
CVE-2026-20421
Média · 6.5
CWE-125 02/02/2026
Out-of-bounds Read em Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738293; Issue ID: MSV-5922.
CVE-2026-20420
Média · 6.5
CWE-125 02/02/2026
Out-of-bounds Read em Mediatek Nr15
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738313; Issue ID: MSV-5935.
CVE-2026-20419
Média · 6.5
CWE-754 02/02/2026
Improper Check for Unusual or Exceptional Conditions em Mediatek Nbiot Sdk
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852.
CVE-2026-20418
Crítica · 9.8
CWE-787 02/02/2026
Escrita fora de limites no Thread permite escalonamento remoto de privilégios (MediaTek)
Em Thread, há uma possível escrita fora dos limites devido a uma verificação de limites ausente. Isso pode levar a escalonamento remoto de privilégios sem privilégios adicionais de execução necessários. Não é necessária interação do usuário para a exploração. Patch ID: WCNCR00465153; Issue ID: MSV-4927.
CVE-2026-20417
Média · 5.3
CWE-787 02/02/2026
Out-of-bounds Write em Google Android
In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10314946 / ALPS10340155; Issue ID: MSV-5154.
CVE-2026-20415
Média · 5.5
CWE-667 02/02/2026
In imgsys, there is a possible memory corruption due to improper locking. This could…
In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617.
CVE-2026-20414
Média · 6.7
CWE-416 02/02/2026
Use After Free em Google Android
In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362999; Issue ID: MSV-5625.
CVE-2026-20413
Média · 6.7
CWE-787 02/02/2026
Out-of-bounds Write em Google Android
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694.
CVE-2026-20412
Alta · 7.8
CWE-787 02/02/2026
Out-of-bounds Write em Google Android
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5733.
CVE-2026-20411
Alta · 7.8
CWE-416 02/02/2026
Use After Free em Google Android
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5737.
CVE-2026-20410
Média · 6.7
CWE-787 02/02/2026
Out-of-bounds Write em Google Android
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362552; Issue ID: MSV-5760.
CVE-2026-20409
Alta · 7.8
CWE-787 02/02/2026
Out-of-bounds Write em Google Android
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363246; Issue ID: MSV-5779.
CVE-2026-20408
Alta · 8.8
CWE-787 02/02/2026
Out-of-bounds Write em Mediatek Software Development Kit
In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758.
CVE-2026-20407
Crítica · 9.3
CWE-787 02/02/2026
Driver WLAN STA da MediaTek - escalonamento local de privilégios por escrita fora dos limites
Em driver WLAN STA, há uma possível escalação de privilégio devido a uma verificação de limites ausente. Isso pode levar a escalação local de privilégio com necessidade de execução com privilégios de Usuário. Não é necessária interação do usuário para exploração. Patch ID: WCNCR00464377; Issue ID: MSV-4905.
CVE-2026-20406
Média · 6.5
CWE-754 02/02/2026
Improper Check for Unusual or Exceptional Conditions em Mediatek Nr15
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.
CVE-2026-20405
Média · 6.5
CWE-617 02/02/2026
In Modem, there is a possible system crash due to a missing bounds check. This could…
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01688495; Issue ID: MSV-4818.
CVE-2026-20404
Média · 6.5
CWE-787 02/02/2026
Out-of-bounds Write em Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689248; Issue ID: MSV-4837.
CVE-2026-20403
Média · 6.5
CWE-787 02/02/2026
Out-of-bounds Write em Mediatek Nr15
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689254 (Note: For N15 and NR16) / MOLY01689259 (Note: For NR17 and NR17R); Issue ID: MSV-4843.
CVE-2026-20402
Média · 6.5
CWE-787 02/02/2026
Out-of-bounds Write em Mediatek Nr15
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00693083; Issue ID: MSV-5928.
CVE-2026-20401
Alta · 7.5
CWE-754 02/02/2026
Improper Check for Unusual or Exceptional Conditions em Mediatek Nr15
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01738310; Issue ID: MSV-5933.
CVE-2025-20807
Média · 6.7
CWE-190 05/01/2026
Integer Overflow or Wraparound em Google Android
In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114841; Issue ID: MSV-4451.
CVE-2025-20806
Média · 6.7
CWE-416 05/01/2026
Use After Free em Google Android
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114835; Issue ID: MSV-4479.
CVE-2025-20805
Média · 6.7
CWE-416 05/01/2026
Use After Free em Google Android
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114696; Issue ID: MSV-4480.
CVE-2025-20804
Média · 6.7
CWE-416 05/01/2026
Use After Free em Google Android
In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10198951; Issue ID: MSV-4503.