CVE-2026-20551

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730...

CVE-2026-20554

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch...

CVE-2026-20550

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731...

CVE-2026-20584

In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746...

CVE-2026-20584

A memory corruption vulnerability exists in the usb component due to a missing bounds check (CWE-787 ). If a malicious actor already possesses System privilege , they could potentially achieve a local escalation of privilege . This vulnerability does not require user interaction for exploitation....

EUVD-2026-115048

In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746...

CVE-2026-20554

A vulnerability in the Modem component caused by a missing bounds check can lead to a system crash. This flaw could allow for remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by an attacker. User interaction is required for exploitation. Remediat...

CVE-2026-20554

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch...

CVE-2026-20552

A missing bounds check in ccci causes a possible out-of-bounds write , which could lead to a remote denial of service without requiring additional execution privileges. Exploitation requires user interaction . Affected models include MT6880, MT6890, MT6813, MT6986, MT6982, MT6980D, MT2735, and MT...

EUVD-2026-115017

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 Note: For MT6880, MT6890 / ALPS11297423 Note: For MT6813,...

CVE-2026-20551

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730...

CVE-2026-20551

A missing bounds check in the gnss component leads to a possible out of bounds write . This vulnerability could result in a local denial of service without requiring additional execution privileges. Exploitation requires user interaction . The issue is addressed under Patch ID ALPS11309305 and Is...

EUVD-2026-115016

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730...

EUVD-2026-115015

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731...

PT-2026-135276

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 Note: For MT6880, MT6890 / ALPS11297423 Note: For MT6813,...

PT-2026-135275

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730...

CVE-2026-20554: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible system crash due to a missing bounds check

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch...

CVE-2026-20584: MediaTek, Inc. MediaTek chipset: In usb, there is a possible memory corruption due to a missing bounds check

In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11411916; Issue ID: MSV-9746...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Stack Buffer Overflow in Custom Base64 Decoder Program Code C // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142501 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...