CVE-2023-20693

Summary (CVE-2023-20693) In MediaTek wlan firmware, an uncaught exception can cause a system crash, leading to a remote denial of service without user interaction. The NVD entry lists a network exploit vector with no privileges required and no user interaction, and a high impact to availability. ...

CVE-2023-32855

CVE-2023-32855 describes a privilege-escalation defect in the aee module (MediaTek context) caused by a missing permission check, enabling local escalation to System privileges without user interaction. Exploitation status is not detailed in the provided documents. A fix is referenced as Patch ID...

CVE-2023-20689

CVE-2023-20689 affects MediaTek WLAN firmware; root cause is an integer overflow in the WLAN firmware that can trigger a system crash and remote denial of service. Exploitation does not require privileges or user interaction. Affected component: WLAN firmware (MediaTek). Mitigation: patch ALPS076...

CVE-2023-20691

CVE-2023-20691 affects MediaTek WLAN firmware, where an integer overflow can cause a system crash and remote denial of service. Exploitation requires no user interaction and no privileges. Root cause is not elaborated beyond the overflow in the WLAN firmware; no explicit exploit vectors are provi...

CVE-2024-20139

CVE-2024-20139 affects MediaTek Bluetooth firmware (ALPS09001270) due to improper handling of exceptional conditions, causing local denial of service without user interaction. Root cause appears to be a firmware assertion under exceptional handling, with exploitation described as requiring adjace...

CVE-2023-20692

CVE-2023-20692 affects wlan firmware (MediaTek-based devices) where an uncaught exception can crash the system, enabling remote denial of service without privileges or user interaction. The issue is triggered over network access (no auth/UI required). Public details consistently cite a patch: ALP...

CVE-2023-20690

The CVE-2023-20690 entry concerns the WLAN firmware, where an integer overflow can cause a system crash and remote denial of service without authentication or user interaction. Affected component: WLAN firmware (MediaTek context implied by references). Root cause: integer overflow in the WLAN fir...

CVE-2025-20693

The CVE-2025-20693 issue affects the wlan STA driver, with an out-of-bounds read caused by an incorrect bounds check. This vulnerability could allow remote information disclosure from proximal access without extra privileges or user interaction. The impact is described as high confidentiality ris...

CVE-2025-20730

CVE-2025-20730 concerns MediaTek’s MediaTek ALPS preloader with an insecure default value that can enable local elevation of privilege. The vulnerability allows a scenario where a user with System privileges could escalate further without user interaction. The CVE is documented across multiple fe...

CVE-2025-20746

The CVE-2025-20746 entry concerns GNSS service software (as referenced across multiple sources) with an out-of-bounds write caused by an incorrect bounds check. This condition can enable local privilege escalation to System if already present, with no user interaction required. The vulnerability ...

CVE-2025-20747

CVE-2025-20747 describes an out-of-bounds write in the gnss service caused by an incorrect bounds check. The issue could allow a local attacker with System privileges to escalate privileges, with no user interaction required. A patch is available (Patch ID: ALPS10010443; MSV-3966). Documented ref...

CVE-2025-20705

CVE-2025-20705 concerns a memory corruption issue (use-after-free) in the MediaTek Modem’s monitor_hang path that could enable local privilege escalation if an attacker already has System privileges. Exploitation is described as not requiring user interaction. The vulnerability is tied to a patch...

CVE-2025-61611

Technical details for CVE-2025-61611 are not publicly available in the provided documents. Monitor for updates from the cited sources (modem-related input validation issue).

CVE-2025-20765

CVE-2025-20765 affects the MediaTek/MediaTek-derived environment where the race condition in the aee daemon can cause a system crash leading to local denial of service. Exploitation is described as possible without user interaction, but requires the attacker to already have System privileges. The...