CVE-2024-20154

CVE-2024-20154 is a critical stack-based buffer overflow (CWE-121) in the MediaTek MT6769 (Helio G80) modem firmware, specifically affecting the LR12A modem family. The vulnerability exists because the firmware fails to clamp the schedulingInfoList.count field received from a malformed NB-IoT SIB...

CVE-2022-21744

CVE-2022-21744 concerns the Modem 2G RR from MediaTek, where a missing bounds check enables an out-of-bounds write in PNCD decoding that can cause remote code execution. Exploitation requires no user interaction and is possible over the network; the issue is cited with Patch ID MOLY00810064 and I...

CVE-2024-20039

A vulnerability exists in the modem protocol of MediaTek chips due to a missing bounds check, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. The issue is addresse...

CVE-2022-20083

CVE-2022-20083 affects the Modem 2G/3G CC. The issue is an out-of-bounds write caused by a missing bounds check during decoding of a combined FACILITY, enabling remote code execution with network access and no user interaction. Public references in the provided documents point to a patch ID MOLY0...

CVE-2023-32890

CVE-2023-32890 affects MediaTek Modem EMM. The issue is a crash caused by improper input validation, enabling remote denial of service with no user interaction. Exploitation is possible over the network (per CVSS) and does not require privileges. A patch identified as MOLY01183647 (MSV-963) is pr...

CVE-2023-20819

CVE-2023-20819 affects MediaTek’s CDMA PPP protocol component, where a missing bounds check can enable an out-of-bounds write and remote escalation of privilege with no user interaction. A patch is identified as MOLY01068234 (Issue ALPS08010003); exploitation status is not provided in the availab...

CVE-2021-40148

CVE-2021-40148 affects Modem EMM in Google Android devices. Root cause: missing data encryption in the modem EMM leads to information disclosure without privileges or user interaction. Impact: remote information disclosure. Remediation: patch MOLY00716585 (Issue ALPS05886933) has been released. E...

CVE-2023-32874

CVE-2023-32874 is a MediaTek Modem IMS Stack vulnerability. The issue is a possible out-of-bounds write caused by a missing bounds check in the Modem IMS Stack, which the sources state could lead to remote code execution with no additional privileges and no user interaction required. The vulnerab...

CVE-2024-20150

A logic error in the Modem component of MediaTek Chipsets can lead to a system crash , resulting in a remote denial of service . The vulnerability requires no additional execution privileges and no user interaction for exploitation. While technical details on the specific software versions are no...

CVE-2023-32891

CVE-2023-32891 relates to an out-of-bounds write in the bluetooth service caused by improper input validation. Affected component is described as the Bluetooth service (no specific vendor/version in provided text beyond MediaTek-linked sources). The underlying root cause is input validation weakn...

CVE-2022-26446

CVE-2022-26446 affects the Modem 4G RRC. The root cause is improper input validation in handling certain SIB12 (CMAS message) input, causing a system crash and remote denial of service. Exploitation is described as possible without additional execution privileges and without user interaction. The...

CVE-2024-20149

A security vulnerability exists in the Modem module of MediaTek Chipsets due to improper input validation . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation requires no additional execution privileges and no user interaction. Remediation is avail...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

CVE-2025-20678

A security vulnerability exists in the MediaTek Chip IMS service due to incorrect error handling . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) connects to a rogue base station controlled by an attacker; no add...

CVE-2026-20434

The Modem component in MediaTek Chipsets is vulnerable to an out-of-bounds write caused by a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by the attacker. While no ad...