CVE-2023-20693

Summary (CVE-2023-20693) In MediaTek wlan firmware, an uncaught exception can cause a system crash, leading to a remote denial of service without user interaction. The NVD entry lists a network exploit vector with no privileges required and no user interaction, and a high impact to availability. ...

CVE-2023-20689

CVE-2023-20689 affects MediaTek WLAN firmware; root cause is an integer overflow in the WLAN firmware that can trigger a system crash and remote denial of service. Exploitation does not require privileges or user interaction. Affected component: WLAN firmware (MediaTek). Mitigation: patch ALPS076...

CVE-2023-32855

CVE-2023-32855 describes a privilege-escalation defect in the aee module (MediaTek context) caused by a missing permission check, enabling local escalation to System privileges without user interaction. Exploitation status is not detailed in the provided documents. A fix is referenced as Patch ID...

CVE-2023-20692

CVE-2023-20692 affects wlan firmware (MediaTek-based devices) where an uncaught exception can crash the system, enabling remote denial of service without privileges or user interaction. The issue is triggered over network access (no auth/UI required). Public details consistently cite a patch: ALP...

CVE-2023-32807

The CVE-2023-32807 issue affects the wlan service in MediaTek-based devices, caused by an improper input validation that leads to an out-of-bounds read. This could allow local information disclosure and requires system privileges, with no user interaction needed. The vulnerability details are sup...

CVE-2023-20691

CVE-2023-20691 affects MediaTek WLAN firmware, where an integer overflow can cause a system crash and remote denial of service. Exploitation requires no user interaction and no privileges. Root cause is not elaborated beyond the overflow in the WLAN firmware; no explicit exploit vectors are provi...

CVE-2025-20693

A vulnerability exists in the MediaTek Wlan STA Driver microprogramming software due to an incorrect bounds check leading to an out-of-bounds read in memory. This flaw could allow a remote attacker (proximal/adjacent) to disclose protected sensitive information without requiring additional execut...

CVE-2023-20690

The CVE-2023-20690 entry concerns the WLAN firmware, where an integer overflow can cause a system crash and remote denial of service without authentication or user interaction. Affected component: WLAN firmware (MediaTek context implied by references). Root cause: integer overflow in the WLAN fir...

CVE-2025-20730

A local privilege escalation vulnerability exists in the preloader of MediaTek Chipsets due to an insecure default value . A malicious actor who has already obtained System privileges can exploit this flaw to achieve elevated privileges without user interaction. Technical details indicate a logic...

CVE-2025-20746

A security vulnerability exists in the gnss service within MediaTek Chipsets and Qualcomm GNSS Service (affected versions not specified) due to an incorrect bounds check . This flaw allows for a possible out-of-bounds write , which could lead to a local escalation of privilege if an attacker has ...

CVE-2025-20765

A race condition in the aee daemon (part of MediaTek Chipsets ) can lead to a system crash , resulting in a local denial of service . Exploitation requires the attacker to already possess System privileges , and no user interaction is necessary. Remediation is provided via Patch ID: ALPS10190802 ...

CVE-2025-61611

Technical details for CVE-2025-61611 are not publicly available in the provided documents. Monitor for updates from the cited sources (modem-related input validation issue).

CVE-2025-20747

A vulnerability exists in the gnss service of MediaTek Chipsets and Qualcomm Snapdragon GNSS due to an incorrect bounds check, which can lead to an out-of-bounds write . A malicious actor who has already obtained System privileges could exploit this to achieve local escalation of privilege withou...

CVE-2025-20705

A memory corruption vulnerability exists in the monitor_hang component due to a use-after-free condition (CWE-416). If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve local escalation of privilege . Exploitation does not require user intera...