CVE-2024-20154

CVE-2024-20154 is a critical stack-based buffer overflow (CWE-121) in the MediaTek MT6769 (Helio G80) modem firmware, specifically affecting the LR12A modem family. The vulnerability exists because the firmware fails to clamp the schedulingInfoList.count field received from a malformed NB-IoT SIB...

CVE-2022-21744

CVE-2022-21744 concerns the Modem 2G RR from MediaTek, where a missing bounds check enables an out-of-bounds write in PNCD decoding that can cause remote code execution. Exploitation requires no user interaction and is possible over the network; the issue is cited with Patch ID MOLY00810064 and I...

CVE-2024-20039

A vulnerability exists in the modem protocol of MediaTek chips due to a missing bounds check, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. The issue is addresse...

CVE-2022-20083

CVE-2022-20083 affects the Modem 2G/3G CC. The issue is an out-of-bounds write caused by a missing bounds check during decoding of a combined FACILITY, enabling remote code execution with network access and no user interaction. Public references in the provided documents point to a patch ID MOLY0...

CVE-2023-20819

CVE-2023-20819 affects MediaTek’s CDMA PPP protocol component, where a missing bounds check can enable an out-of-bounds write and remote escalation of privilege with no user interaction. A patch is identified as MOLY01068234 (Issue ALPS08010003); exploitation status is not provided in the availab...

CVE-2024-20077

A security vulnerability exists in the Modem component of MediaTek chips (and other devices using these components) due to incorrect error handling . This flaw can be exploited to cause a system crash , resulting in a remote denial of service (DoS) without requiring additional execution privilege...

CVE-2021-40148

CVE-2021-40148 affects Modem EMM in Google Android devices. Root cause: missing data encryption in the modem EMM leads to information disclosure without privileges or user interaction. Impact: remote information disclosure. Remediation: patch MOLY00716585 (Issue ALPS05886933) has been released. E...

CVE-2024-20076

A vulnerability exists in the Modem component due to incorrect error handling , which can lead to a system crash. This flaw enables a remote denial of service (DoS) attack that requires no additional execution privileges or user interaction. The vulnerability affects MediaTek chips and is identif...

CVE-2024-20150

A logic error in the Modem component of MediaTek Chipsets can lead to a system crash , resulting in a remote denial of service . The vulnerability requires no additional execution privileges and no user interaction for exploitation. While technical details on the specific software versions are no...

CVE-2022-26446

CVE-2022-26446 affects the Modem 4G RRC. The root cause is improper input validation in handling certain SIB12 (CMAS message) input, causing a system crash and remote denial of service. Exploitation is described as possible without additional execution privileges and without user interaction. The...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

CVE-2023-32840

A security vulnerability exists in the modem CCCI module of MediaTek chips due to a missing bounds check. This flaw can result in an out-of-bounds write , potentially leading to a local escalation of privilege requiring System execution privileges and user interaction for exploitation. Remediatio...

CVE-2025-20678

A security vulnerability exists in the MediaTek Chip IMS service due to incorrect error handling . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) connects to a rogue base station controlled by an attacker; no add...

CVE-2026-20434

The Modem component in MediaTek Chipsets is vulnerable to an out-of-bounds write caused by a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by the attacker. While no ad...

CVE-2025-20727

A heap buffer overflow vulnerability in the Modem software of MediaTek Chipsets and Huawei devices (affected versions not specified) allows for an out-of-bounds write . An attacker could exploit this by controlling a rogue base station to which a User Equipment (UE) connects, leading to a remote ...

CVE-2025-20725

A vulnerability exists in the ims service of MediaTek Chipsets and Huawei IMS due to a missing bounds check, which can lead to an out-of-bounds write . This flaw could allow a remote attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station contr...

CVE-2025-20726

A vulnerability exists in the Modem component (specifically associated with MediaTek Chipsets and Huawei Modem ) due to an incorrect bounds check that can lead to an out-of-bounds write (CWE-787, CWE-122). An attacker controlling a rogue base station could exploit this to achieve remote escalatio...