Vulnerabilidades de Mediatek

CVE-2025-20803 Média · 6.7 CWE-190 05/01/2026

Integer Overflow or Wraparound em Google Android

In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10199779; Issue ID: MSV-4504.

CVE-2025-20802 Média · 6.7 CWE-416 05/01/2026

Use After Free em Google Android

In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10238968; Issue ID: MSV-4914.

CVE-2025-20801 Alta · 7.0 CWE-415 05/01/2026

Double Free em Google Android

In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10251210; Issue ID: MSV-4926.

CVE-2025-20800 Alta · 7.8 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10267349; Issue ID: MSV-5033.

CVE-2025-20799 Alta · 7.8 CWE-416 05/01/2026

Use After Free em Google Android

In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049.

CVE-2025-20798 Alta · 7.8 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5533.

CVE-2025-20797 Alta · 7.8 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5534.

CVE-2025-20796 Alta · 7.8 CWE-1285 05/01/2026

In imgsys, there is a possible out of bounds write due to improper input validation…

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553.

CVE-2025-20795 Alta · 7.8 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141.

CVE-2025-20794 Média · 6.5 CWE-121 05/01/2026

Stack-based Buffer Overflow em Mediatek Nr15

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01689259 / MOLY01586470; Issue ID: MSV-4847.

CVE-2025-20793 Média · 6.5 CWE-476 05/01/2026

NULL Pointer Dereference em Mediatek Nr15

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01430930; Issue ID: MSV-4836.

CVE-2025-20787 Média · 6.7 CWE-416 05/01/2026

Use After Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149879; Issue ID: MSV-4658.

CVE-2025-20786 Média · 6.7 CWE-415 05/01/2026

Double Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4673.

CVE-2025-20785 Média · 6.7 CWE-416 05/01/2026

Use After Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10149882; Issue ID: MSV-4677.

CVE-2025-20784 Média · 6.7 CWE-457 05/01/2026

Use of Uninitialized Variable em Google Android

In display, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4683.

CVE-2025-20783 Média · 6.7 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4684.

CVE-2025-20782 Média · 6.7 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182882; Issue ID: MSV-4685.

CVE-2025-20781 Alta · 7.8 CWE-415 05/01/2026

Double Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4699.

CVE-2025-20780 Alta · 7.8 CWE-416 05/01/2026

Use After Free em Google Android

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712.

CVE-2025-20779 Alta · 7.0 CWE-416 05/01/2026

Use After Free em Google Android

In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Issue ID: MSV-4720.

CVE-2025-20778 Alta · 7.8 CWE-787 05/01/2026

Out-of-bounds Write em Google Android

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4729.

CVE-2025-20762 Média · 6.5 CWE-617 05/01/2026

In Modem, there is a possible system crash due to incorrect error handling. This could…

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01685181; Issue ID: MSV-4760.

CVE-2025-20761 Média · 6.5 CWE-754 05/01/2026

Improper Check for Unusual or Exceptional Conditions em Mediatek Nr15

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01311265; Issue ID: MSV-4655.

CVE-2025-20760 Média · 6.5 CWE-617 05/01/2026

In Modem, there is a possible read of uninitialized heap data due to an uncaught…

In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01676750; Issue ID: MSV-4653.

CVE-2025-20792 Média · 5.3 CWE-617 02/12/2025

In Modem, there is a possible system crash due to improper input validation. This could…

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01717526; Issue ID: MSV-5591.