CVE-2026-20435

A logic error in the preloader of MediaTek chipsets (affecting approximately 875 million Android devices) allows for the reading of device unique identifiers. An attacker with physical access can exploit this via USB in under 45 seconds, even when the device is powered off, to bypass lock screens...

CVE-2023-20726

The CVE-2023-20726 entry describes a GPS location information disclosure in the MediaTek mnld module caused by a missing permission check. Impact is local information disclosure with no privileges or user interaction required (CVSS v3.1 base score 3.3, LOW). Affected component: mnld in MediaTek S...

CVE-2023-32820

CVE-2023-32820 affects MediaTek wlan firmware. The issue arises from improper input handling that can trigger a firmware assertion, potentially enabling remote denial of service without extra privileges or user interaction. Public details consistently reference a patch ID ALPS07932637 (and ALPS07...

CVE-2025-20656

A vulnerability exists in the DA component of MediaTek microprogramming software due to a missing bounds check , which leads to an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local privilege escalation and potentially expose prote...

CVE-2024-20148

A security vulnerability exists in MediaTek chipsets affecting the wlan STA FW module. The issue is caused by improper input validation , which can lead to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote (proximal/adjacent) code execution without requiring add...

CVE-2024-20104

A security vulnerability exists in MediaTek's microprogramming software due to a missing bounds check during the processing of DA files . This flaw allows for out-of-bounds writes in memory, which an attacker can exploit to achieve local escalation of privilege . Successful exploitation requires ...

CVE-2023-32871

A security vulnerability exists in the DA module of MediaTek chips due to an incorrect status check . This flaw allows for a permission bypass that could lead to local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is associated with Pat...

CVE-2024-20040

A security vulnerability exists in the wlan firmware of MediaTek chips (specifically MT6XXX and MT79XX chipsets) due to improper input validation . This flaw allows for a possible out-of-bounds write , which could lead to remote escalation of privilege without requiring additional execution privi...

CVE-2024-20144

A security vulnerability exists in MediaTek Chipsets within the V6 DA module due to a missing bounds check . This flaw can lead to an out-of-bounds write , potentially allowing an attacker with physical access to the device to achieve local escalation of privilege . No additional execution privil...

CVE-2023-20842

CVE-2023-20842 affects MediaTek devices via the core component described as /imgs y s_cmdq/ . The vulnerability is an out-of-bounds write caused by missing valid range checking in imgsys_cmdq, which can enable local privilege escalation with System execution privileges after user interaction. No ...

CVE-2024-20022

CVE-2024-20022 describes a missing bounds check in the lk module that could allow local escalation of privilege to SYSTEM-level execution. The issue is triggered locally (no user interaction required) and is corroborated across multiple connected sources (e.g., Red Hat advisory and other feeds) w...

CVE-2024-20146

The MediaTek wlan STA driver is vulnerable to an out-of-bounds write due to improper input validation. This flaw could allow a remote attacker to execute arbitrary code with no additional execution privileges required and no user interaction. The vulnerability is particularly relevant to Android ...

CVE-2024-20023

A vulnerability exists in the flashc component of MediaTek hardware due to a lack of validation, leading to a possible out-of-bounds write . An attacker with System execution privileges could exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploi...

CVE-2024-20143

The software V6 DA is vulnerable to an out-of-bounds write caused by a missing bounds check . This security flaw could enable a local escalation of privilege for an attacker with physical access to the device, requiring no additional execution privileges but necessitating user interaction for exp...

CVE-2025-20635

CVE-2025-20635 concerns MediaTek V6 DA with a missing bounds check in the DA module, enabling a possible out-of-bounds write and local elevation of privilege if an attacker has physical access to the device. Exploitation requires user interaction; no remote/vector details are provided. The patch ...

CVE-2023-20829

The CVE-2023-20829 issue affects the gps component in MediaTek-based devices, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation to SYSTEM with no user interaction required, per the description. Reported under various feeds (NVD, Red ...

CVE-2023-20848

The CVE-2023-20848 entry concerns an out-of-bounds read in imgsys_cmdq caused by missing valid range checking, enabling local escalation of privileges with user interaction required. Documented impact is high for confidentiality/integrity/availability, and a patch ID (ALPS07340433) is noted as th...

CVE-2024-20145

A security vulnerability exists in MediaTek Chipsets within the V6 DA module due to a missing bounds check. This flaw allows for a possible out-of-bounds write , which could lead to local escalation of privilege . Exploitation requires physical access to the device and user interaction , but no a...

CVE-2024-20140

A security vulnerability exists in MediaTek chipsets due to a missing bounds check in the power module, which could lead to an out-of-bounds write . This flaw may allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . The vulnerability requi...

CVE-2023-20832

The CVE-2023-20832 entry relates to gps with a potential out-of-bounds write due to a missing bounds check. Impact is local privilege escalation with System privileges required and no user interaction. A fix is referenced as Patch ID ALPS08014144 / Issue ID ALPS08013530; apply the patch to mitiga...

CVE-2023-20734

CVE-2023-20734 affects the vcu module in MediaTek chips. The issue is described as an out-of-bounds write due to a missing bounds check, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction required. A patch is available (ALPS07645149; ALPS07645184). C...

CVE-2023-20849

The CVE-2023-20849 vulnerability is in the imgsys_cmdq component and is caused by missing valid range checking, leading to a use-after-free that can enable local privilege escalation with SYSTEM privileges. Exploitation requires user interaction. Affected context references MediaTek-related discl...

CVE-2023-32812

CVE-2023-32812 affects the gnss service in MediaTek contexts, with an out-of-bounds write caused by improper input validation. The resulting impact is local privilege escalation with SYSTEM privileges needed, and exploitation requires no user interaction. A patch is noted (ALPS08017365 / ALPS0801...

CVE-2024-20049

The flashc module in MediaTek chips is vulnerable to an information disclosure vulnerability caused by an uncaught exception . Exploitation requires System execution privileges and does not require user interaction. While technical details regarding the specific information disclosed are not prov...

CVE-2023-20844

CVE-2023-20844 affects the imgsys_cmdq component in MediaTek devices. The issue is an out-of-bounds read caused by missing valid range checking, potentially enabling local information disclosure with system-execution privileges required. Exploitation requires user interaction. The vulnerability i...

CVE-2024-20081

A vulnerability exists in the gnss service due to an out-of-bounds write caused by improper input validation. This flaw allows for a local escalation of privilege to System execution privileges. Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS08719602 (I...

CVE-2023-20747

The CVE-2023-20747 issue affects the vcu module in MediaTek chips. Root cause is memory corruption due to type confusion, leading to local denial of service with system execution privileges. Exploitation details are not provided; user interaction is not required. A patch identified as ALPS0751910...

CVE-2024-20050

A security vulnerability exists in the flashc module within MediaTek chips. The issue is caused by an uncaught exception , which could lead to local information disclosure . Exploitation requires System execution privileges and does not require user interaction. While the technical impact is clas...

CVE-2023-20828

The CVE-2023-20828 issue affects the gps component in MediaTek chips (GPS) with an out-of-bounds write caused by a missing bounds check. This can lead to local privilege escalation with SYSTEM rights and does not require user interaction. Affected details are supported by multiple sources (NVD/Re...

CVE-2023-20830

The CVE-2023-20830 entry describes a local out-of-bounds write in gps on MediaTek chips due to a missing bounds check. This could allow local escalation of privilege with System execution privileges; user interaction is not required. The issue is associated with a patch ID ALPS08014144 and an Iss...

CVE-2023-20838

CVE-2023-20838 concerns the imgsys component. Multiple connected sources confirm a race-condition–driven out-of-bounds read that can leak local information and, in some scenarios, enable system-level execution with user interaction required for exploitation. Affected references consistently descr...

CVE-2024-20051

The flashc module in MediaTek chips is vulnerable to a system crash caused by an uncaught exception . This flaw can lead to a local denial of service (DoS) when triggered with System execution privileges . Exploitation does not require user interaction. While specific affected versions are not li...

CVE-2024-20055

A vulnerability exists in the imgsys module within MediaTek chips due to a missing bounds check (CWE-125). This flaw can lead to local information disclosure , though it requires System execution privileges and user interaction for exploitation. Remediation is addressed via Patch ID: ALPS08518692...

CVE-2022-32590

CVE-2022-32590 describes a use-after-free in the WLAN path that could enable local privilege escalation with SYSTEM privileges, requiring no user interaction. The description and Red Hat/NVD entries consistently reference a patch/Issue ID ALPS07299425. Connected documents confirm the issue is tie...

CVE-2024-20107

A security vulnerability exists in the da component of MediaTek MT8676 chipsets due to a missing bounds check . This flaw allows for an out-of-bounds read , which could result in local information disclosure without requiring additional execution privileges or user interaction. While a patch ID (...

CVE-2023-20846

CVE-2023-20846 concerns MediaTek chips where the vulnerability resides in the imgsys_cmdq path, caused by missing valid range checking that enables an out-of-bounds read. The documented impact is local information disclosure with system-level execution privileges required, and exploitation report...

CVE-2024-25626

The CVE-2024-25626 issue affects Yocto Project’s BitBake/Toaster: when the Toaster web interface is running, there is missing input validation in the Toaster server that can allow remote code execution via a crafted HTTP request. Authentication is not required, and the Toaster server is not part ...

CVE-2023-20850

The CVE concerns the imgsys_cmdq component in MediaTek chips, where an out-of-bounds write can occur due to missing valid range checking. This could permit local escalation of privilege with system execution privileges required, and user interaction is needed for exploitation. Documented impact i...

CVE-2023-32806

CVE-2023-32806 affects the MediaTek WLAN driver and involves an out-of-bounds write caused by improper input validation. The issue can lead to local escalation of privileges with SYSTEM-level execution, requiring no user interaction. The vulnerability is described with a patch reference (ALPS0744...

CVE-2023-20712

CVE-2023-20712 affects MediaTek WLAN code (wlan module) and is due to a missing bounds check, enabling an out-of-bounds write that can yield local privilege escalation to System level. Exploit requires LOCAL access with HIGH privileges and no user interaction. Patch: ALPS07796914 (Issue ALPS07796...

CVE-2023-20841

CVE-2023-20841 affects imgsys and is described as an out-of-bounds write caused by missing valid range checking, enabling local escalation of privileges with System execution privileges needed. User interaction is required for exploitation. Reported patch ID: ALPS07326455 (Issue ID: ALPS07326441)...

CVE-2024-20054

A security vulnerability exists in the gnss module of MediaTek chips due to a missing bounds check . This flaw could lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is identified by Patch ID: ALPS085802...

CVE-2024-20147

A security vulnerability exists in the Bluetooth FW microprogramming software of MediaTek chipsets. The flaw originates from improper exception handling , which can lead to a reachable assertion . Exploiting this vulnerability allows a remote attacker to cause a denial of service (DoS) without re...

CVE-2023-20840

CVE-2023-20840 affects imgsys with a possible out-of-bounds read/write caused by missing valid-range checks. Exploitation requires user interaction and can grant local escalation of privilege with system execution privileges. A patch is referenced: ALPS07326430 (Issue ALPS07326430). No additional...

CVE-2023-20845

CVE-2023-20845 affects imgsys. The vulnerability is an out-of-bounds read caused by missing valid range checking, leading to local information disclosure with system execution privileges required and user interaction for exploitation. Patch ID ALPS07197795 / Issue ID ALPS07340357 is associated wi...

CVE-2022-26475

CVE-2022-26475 concerns a local privilege-escalation in MediaTek wlan due to an out-of-bounds write from a missing bounds check. Affected component is wlan code within MediaTek-based devices; exploitation would grant System-level privileges without user interaction, as described in multiple sourc...

CVE-2023-20740

The CVE-2023-20740 issue affects the vcu component in certain MediaTek-based devices, caused by a logic error that can trigger memory corruption. This can lead to local escalation of privilege with SYSTEM privileges and does not require user interaction. A patch (ALPS07559819) is referenced as a ...

CVE-2023-20843

CVE-2023-20843 involves an out-of-bounds read in the imgsys_cmdq component caused by missing valid range checking. Impact: local information disclosure with the potential for system-level execution privileges required, and exploitation reportedly needs user interaction. Affected context is MediaT...

CVE-2023-20715

CVE-2023-20715 affects the wlan component in MediaTek-based devices. The issue is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privileges with SYSTEM execution rights required. Exploitation reportedly does not require user interaction. The vulnerability’s ...

CVE-2024-20053

The flashc module in MediaTek chips is vulnerable to an out-of-bounds write caused by an uncaught exception . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is identified by Pa...