CVE-2025-71254

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-20437

CVE-2026-20437 affects MAE. A use-after-free causes a possible system crash leading to local denial of service when the attacker already has System privileges; no user interaction is required. Patch ALPS10431940 (MSV-5843).

CVE-2026-20438

CVE-2026-20438 affects MAE with a race-condition out-of-bounds write that can cause local privilege escalation without user interaction. The issue requires the System privilege to exploit and is associated with Patch ID ALPS10431920 and Issue MSV-5835. Red Hat and other feeds corroborate the same...

CVE-2026-20440

CVE-2026-20440 concerns MediaTek MAE (MediaTek chipsets). The flaw is an out-of-bounds write caused by a missing bounds check in MAE, enabling local privilege escalation without user interaction once System privileges are held. Affected component/impact: local escalation of privilege with high co...

CVE-2025-20783

CVE-2025-20783 describes an out-of-bounds write due to a missing bounds check in display code, potentially enabling local privilege escalation to SYSTEM without user interaction. The vulnerability is associated with MediaTek chipsets, with references noting Patch ID ALPS10182882 and Issue MSV-468...

CVE-2025-20786

CVE-2025-20786: memory corruption via use-after-free in display code enables local escalation of privilege for actors with System privileges; no user interaction required. Patch ALPS10149882 (Issue MSV-4673) is referenced across sources (e.g., Red Hat, NVD, CVE lists). Exploitation status not pro...

CVE-2025-36912

CVE-2025-36912: DoS in the cellular modem due to a logic error; network-triggered, no user interaction required, with availability impact. Affected: cellular modem components in Google Pixel Android devices as documented in the Pixel December 2025 bulletin and corroborated by Red Hat/NVD/USD feed...

CVE-2025-36919

CVE-2025-36919: A double-free condition in aocc_read within aoc_channel_dev.c due to improper locking enables local elevation of privilege. Exploitation requires local access (no user interaction). Multiple feeds (NVD/Red Hat/CNVD/CVELIST) reference the same issue with AoC component; Pixel Androi...

CVE-2025-36924

CVE-2025-36924 describes an out-of-bounds write in ss_DecodeLcsAssistDataReqMsg() within ss_LcsManagement.c due to an incorrect bounds check. The impact is remote escalation of privilege with no additional execution privileges needed and no user interaction required. Connected sources include And...

CVE-2025-48569

CVE-2025-48569 is an Android DoS vulnerability described in multiple sources as a possible permanent denial of service caused by resource exhaustion, exploitable locally without user interaction. The Red Hat, CIRCL, EUVD, NVD and Android bulletin entries concur on the issue, with the Android 16 Q...

CVE-2025-61612

CVE-2025-61612 concerns the ntr modem component (referred to as “nr modem” in the sources) and describes a crash caused by improper input validation that could enable remote denial of service with no privileges required. The available connected reports consistently list the affected software as n...

CVE-2025-71253

CVE-2025-71253 concerns Modem IMS with an input validation flaw that can allow remote denial of service without extra privileges. The issue is described as improper input validation in Modem IMS, leading to availability impact (high) per CVSS vector: Network access, no user interaction, low attac...

CVE-2026-0114

CVE-2026-0114 affects the Modem component, with an out-of-bounds write caused by an incorrect bounds check that could lead to remote code execution without user interaction or privileges. The description across Red Hat, NVD, EUVD, Android Pixel bulletin, and OSV entries consistently references th...

CVE-2025-20749

In MediaTek charger-related CVE-2025-20749, the flaw is an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privilege for an attacker who already has System privileges, with no user interaction required. Affected component is the charger subsystem; the iss...

CVE-2025-20771

CVE-2025-20771 relates to a local privilege-escalation in MediaTek chipsets due to improper input validation. A malicious actor already with System privileges could exploit this without user interaction, per multiple feeds. The underlying flaw is in input handling leading to elevation of privileg...

CVE-2025-20773

The CVE-2025-20773 entry describes a memory corruption via use-after-free in the MediaTek chipsets display path, enabling local escalation of privilege for an attacker already with System privileges. No user interaction is required. The vulnerability impact is described as high for confidentialit...

CVE-2025-3012

CVE-2025-3012 is associated with Unisoc dpc modem. The connected documents consistently describe a null pointer dereference in the modem stack that can cause a system crash and remote denial of service without requiring user interaction or local privileges. Affected component: dpc modem (Unisoc)....

CVE-2025-48591

CVE-2025-48591 is an Android framework information-disclosure vulnerability caused by a missing permission check in multiple locations, allowing local read-access to another user’s files without requiring privileges or user interaction. Affected: Android devices with patches that address ASB 2025...

CVE-2025-48598

Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates from vendors (Android, Red Hat, ENISA OSV) for concrete impact, affected products, and patches.

CVE-2025-48650

CVE-2025-48650 is described in public sources as an information disclosure via SQL injection that can lead to local privilege escalation with no additional execution privileges and no user interaction required. The initial entry does not specify affected products or versions. Connected documents ...

CVE-2026-0122

CVE-2026-0122 is reported in Pixel updates as a Remote Code Execution risk in the Baseband component, caused by an out-of-bounds write/memory corruption. Exploitation is described as requiring no user interaction and could allow remote code execution with high impact. The Pixel Bulletin lists the...

CVE-2025-20763

CVE-2025-20763 affects the mmdvfs component. A missing bounds check can enable an out-of-bounds write, leading to local privilege escalation if an attacker already holds System privileges. No user interaction is required. Public records across NVD/Red Hat/ENISA and other feeds confirm the issue a...

CVE-2025-20799

CVE-2025-20799 affects the c2ps component and is linked to a memory corruption via use-after-free. The issue enables local escalation of privilege if the attacker already holds System privileges, with no user interaction required. The vulnerability details indicate a patch identified as ALPS10274...

CVE-2025-36929

CVE-2025-36929 affects gxp_fence_manager.cc AreFencesRegistered. The issue is an information leak caused by improper input validation, enabling local information disclosure without extra privileges and without user interaction. Public exploitation details are not provided in the documents. The An...

CVE-2025-61608

CVE-2025-61608 affects Unisoc nr modem. It is caused by improper input validation that can crash the system and enable remote denial of service, with CVSS v3.1 base metrics: AV(Network), AC(Low), PR(None), UI(None), S(Unchanged), C(N/A), I(N/A), A(High) and a base score of 7.5. Public documents d...

CVE-2025-61616

CVE-2025-61616 affects the nr modem component where improper input validation can cause a system crash, leading to remote denial of service. The public records consistently describe the vulnerability as a crash in nr modem with no additional execution privileges required, and the impact is Availa...

CVE-2025-61619

CVE-2025-61619 concerns the nr modem component, where improper input validation can cause a system crash leading to a remote denial of service without requiring privileges. The available details in the connected documents consistently describe a crash-based impact and a remote DoS vector, with at...

CVE-2025-69278

CVE-2025-69278 affects the nr modem. The issue is a crash caused by improper input validation, leading to remote denial of service. CVSS 3.1 base score 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction). Exploitation details are not provided in the documents; no remediat...

CVE-2025-71256

CVE-2025-71256 affects the nr modem component. The issue is improper input validation that can allow remote denial of service without additional privileges. Attack vector is network with no user interaction; impact is availability degradation (CVE scored with CVSS v3.1 base 7.5, HIGH). Root cause...

CVE-2026-0118

Technical details about CVE-2026-0118 are not publicly provided in the supplied documents. Monitor for updates from the sources listed; the available descriptions indicate a local privilege escalation via oobconfig bypass but lack specifics.

CVE-2026-0123

The CVE-2026-0123 entry concerns the EfwApTransport::ProcessRxRing function in efw_ap_transport.cc, where an out-of-bounds write can occur due to a missing bounds check. This vulnerability is described as enabling local elevation of privilege with no additional execution privileges required and n...

CVE-2025-20743

The CVE-2025-20743 entry concerns the clkdbg component, where a use-after-free condition can lead to local privilege escalation if an attacker already has System privileges. The vulnerability does not require user interaction and has a local attack vector with low complexity. The patch reference ...

CVE-2025-20745

CVE-2025-20745 concerns a memory corruption issue in apusys caused by a use-after-free, enabling local privilege escalation for an attacker with System privileges. The vulnerability does not require user interaction. Affected component: apusys; root cause: use-after-free leading to memory corrupt...

CVE-2025-20796

CVE-2025-20796 affects imgsys with an out-of-bounds write caused by improper input validation. The issue can lead to local privilege escalation if an attacker already has System privileges and must involve user interaction for exploitation. A patch is referenced (ALPS10314745; MSV-5553). CVSS v3....

CVE-2025-20800

CVE-2025-20800 affects the MediaTek-related component mminfra. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege to System level without user interaction. Exploitation details (vectors, exploit code) are not provided in the supplied docum...

CVE-2025-36936

The CVE-2025-36936 entry concerns Tachyon Server, specifically the GetTachyonCommand function in tachyon_server_common.h. The issue is a potential out-of-bounds write caused by an integer overflow, enabling local elevation of privilege with no additional execution privileges required and no user ...

CVE-2025-48628

Summary: CVE-2025-48628 affects the Android framework, specifically the PrintManagerService’s validateIconUserBoundary, enabling a cross-user image leak due to a confused deputy and enabling local privilege escalation without extra execution privileges or user interaction. What is affected: Print...

CVE-2025-61617

CVE-2025-61617 affects Unisoc’s NR modem, with a potential remote denial-of-service caused by improper input validation. The description and Red Hat/NVD entries confirm a system crash possibility without requiring privileges. Connected sources reference an Android/Samsung patching context for rel...

CVE-2025-20723

The CVE-2025-20723 entry concerns the gnss driver. It describes an out-of-bounds write caused by an incorrect bounds check, potentially enabling local privilege escalation to System level without user interaction. A patch is identified (ALPS09920033) and the associated issue MSV-3797. Connected s...

CVE-2025-20744

The CVE-2025-20744 entry concerns the pda component with a use-after-free in privileged context leading to local escalation of privilege. The advisory indicates that a malicious actor who already has System privileges can exploit this without user interaction; no exploit vectors or in-wild detail...

CVE-2025-20776

CVE-2025-20776 affects MediaTek chipsets with an out-of-bounds read caused by a missing bounds check. This can enable local privilege escalation to System level without user interaction. Exploitation status is not detailed in the provided documents. Patch: ALPS10184297 (MSV-4759) is referenced. N...

CVE-2025-20788

CVE-2025-20788 affects the GPU PDMA path in MediaTek chipsets. The issue is a memory corruption caused by a missing permission check, which can enable local denial of service with no additional execution privileges required. Exploitation requires user interaction. A patch is available: ALPS101177...

CVE-2025-20789

In GPU pdma on affected MediaTek platforms, a missing bounds check can lead to local information disclosure. The vulnerability allows leakage of information without extra privileges, with exploitation requiring user interaction. A patch is referenced (ALPS10117741; MSV-4538). Affected component i...

CVE-2025-20804

CVE-2025-20804 : The description indicates a memory corruption via a use-after-free in the dpe component, enabling local escalation of privilege to System level with user interaction required for exploitation. The entry notes a Patch ID ALPS10198951 and Issue ID MSV-4503. Public references across...

CVE-2026-0112

CVE-2026-0112 describes a use-after-free in vpu_open_inst of vpu_ioctl.c caused by a race condition, enabling local privilege escalation with no extra execution privileges or user interaction required. Multiple feeds (NVD/Red Hat/EUVD/PT Security/OSV) report the same description. The connected so...

CVE-2026-0115

Technical details for CVE-2026-0115 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-20769

CVE-2025-20769 is described across multiple sources as a local-out-of-bounds write in display logic due to a missing bounds check, potentially enabling local escalation of privilege to System level without user interaction on MediaTek chipsets. Patch: ALPS10196993 (MSV-4804). Affected components ...

CVE-2025-20798

MediaTek chipsets/Battery component contains an out-of-bounds write due to a missing bounds check, enabling local privilege escalation if an attacker already has System privileges. User interaction is not required. Patch ALPS10315812 and Issue MSV-5533 address this. Exploitation details are not p...

CVE-2026-0110

CVE-2026-0110 describes a memory corruption issue in MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp that can lead to a remote elevation of privilege with no additional execution privileges or user interaction required. The vulnerability is referenced across multiple sources (NVD, Red Hat, EUVD, CVE reco...

CVE-2025-20770

CVE-2025-20770 involves a memory corruption via use-after-free in display handling on MediaTek chipsets, resulting in local privilege escalation if an attacker already has System privileges. No user interaction is required. The vulnerability affects the component responsible for display/memory ha...