4257 matches found
CVE-2026-43499-aristotle
CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Escalada de privilegios local tmp-root para el au/KDDI Xiaomi "aristotle" XIG04 en Android 12 , a través de CVE-2026-43499. Es una primitiva de root del propietario del dispositivo: enraíza tu propio teléfono por ejemplo, para reactivar ADB cuando l...
AutomatedRoot
AutomatedRoot Rootea dispositivos MediaTek usando el exploit mtk-su CVE-2020-0069. Requisitos Python 3.9 o más reciente en %PATH% para Windows. ADB en %PATH% para Windows. El PoC del CVE-2020-0069 mtk-su. Uso Descarga los binarios de mtk-su desde la página de MediaTek's SU en XDA y muévelos a sus...
mtk_bp
MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...
mtkclient
Idioma: 🇺🇸 🇨🇳 MTKClient Solo una herramienta mtk para explotación, lectura/escritura de flash y hacer cosas locas. En Windows, necesitas instalar el puerto mtk original y el controlador usbdk consulta las instrucciones a continuación. En Linux, solo se necesita un kernel parcheado cuando se usa...
FirmWire
-. .-. | |+ \ \ / /+ .-. .- \ / \ | | | | '| ' \ // / | | '/ - / \ / '-' '-|| | || |||// | || |-' '-' FirmWire FirmWire es una plataforma de análisis de firmware de banda base de sistema completo que soporta Samsung y MediaTek. Permite fuzzing, análisis de causa raíz y depuración de imágenes...
CVE-2024-20154
CVE-2024-20154: NB-IoT SIB1-NB Stack Overflow in MediaTek MT6769 Baseband Classification: CWE-121 — Stack-based Buffer Overflow Severity: Critical MediaTek bulletin · 8.8 High, Attack Vector: Adjacent CISA-ADP Type: Remote Code Execution — no user interaction, no prior association Disclosure:...
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario-
CVE-2026-20404-MediaTek-modem-remote-DoS-rogue-base-station-scenario- A MediaTek modem input validation issue can cause a system crash remote DoS when a UE connects to a rogue base station controlled by an attacker with no user interaction required. The provided check.sh code is used to: 1...
cve-2023-20768
CVE-2023-20768 on the Samsung Galaxy M32 — a reachability study Summary. CVE-2023-20768 is a type confusion CWE-843 in MediaTek's ION allocator. I checked whether it is actually exploitable on a Samsung SM-M325F Galaxy M32, Helio G80 running the July 2022 firmware. The vulnerable code is present,...
CVE-2020-0069_poc
Descripción Este repositorio contiene los materiales que utilizamos para investigar CVE-2020-0069 en un Xiaomi Redmi 6a con un SoC Mediatek MT6762M. Hay tres programas: kernelrw.c un programa en C que permite leer/escribir memoria del kernel poc.sh un script de shell syscallhook.c una biblioteca ...
SUSE CVE-2026-97501
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrlgpiodirectioninput / pinctrlgpiodirectionoutput take the pinctrl mutex. This causes a gpiochip operations to need to sleep. Worse yet, the .cansleep...
CVE-2026-97501
A flaw was found in the Linux kernel's MediaTek pin controller pinctrl driver, which can lead to a Denial of Service DoS. When configuring general-purpose input/output GPIO pin directions, the driver attempts to acquire a blocking lock while operating in an atomic context. A local attacker could...
CVE-2026-97414
A flaw was found in the Linux kernel's MediaTek audio driver. When suspending the audio device, the driver fails to verify whether memory allocation for the register backup buffer succeeded before accessing it. A local user capable of triggering power management operations during low-memory...
ghidra-mtk-loader
MediaTek md1img Loader for Ghidra Ghidra loader for the MediaTek md1img modem firmware image format. Currently, only nanoMIPS-based firmware is supported, but basic features may still work if you manually choose a different architecture e.g., MIPS when loading an image. Setup For nanoMIPS-based...
CVE-2026-97579
A flaw was found in the Linux kernel's MediaTek video codec driver. An out-of-bounds write occurs during AV1 video decoding because tile information from the video stream is copied into fixed-size internal memory without proper bounds checking. A local user could exploit this flaw by submitting...
mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce
CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...
ROS-20260929-73-0159
The vulnerability of the iommu/mediatek component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-98159
A flaw was found in the Linux kernel's MediaTek MT7921 Wi-Fi driver. The driver fails to validate the region count and record lengths when parsing Country Location Control CLC firmware data. An attacker capable of supplying a malformed firmware image could trigger an out-of-bounds memory access o...
CVE-2026-93819
A flaw was found in the Linux kernel's MediaTek PCIe driver. The driver fails to acquire the proper lock while stopping and removing a root bus, allowing a race condition to occur alongside concurrent bus rescan or hotplug operations initiated via sysfs. A local user could exploit this race to...
mtk_su
MTK SU MTK SU es una LPE para CVE-2020-0069. Este exploit fue probado en un TCL LX A502DL con un SoC MediaTek MT6739 que ejecuta Android 8.1.0. Compilación mkdir build cd build export ANDROIDNDK= cmake -DCMAKETOOLCHAINFILE="$ANDROIDNDK?/build/cmake/android.toolchain.cmake"...