CVE-2025-20659

The CVE-2025-20659 entry concerns a vulnerability in Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and has an adjacent attack vector with no privileges require...

CVE-2026-20432

CVE-2026-20432 affects a MediaTek modem component, where a missing bounds check could allow an out-of-bounds write. The resulting impact is remote escalation of privilege if a UE connects to a rogue base station; exploitation requires user interaction. Patch MOLY01406170 (MSV-4461) is noted. Conn...

CVE-2026-20479

CVE-2026-20479 concerns a vulnerability in a modem where a missing bounds check allows an out-of-bounds read. This can enable remote denial of service when a user equipment (UE) connects to a rogue base station controlled by an attacker, without requiring user interaction or additional execution ...

CVE-2026-20480

Summary (CVE-2026-20480): In Audio HAL, there is a possible out-of-bounds write caused by a heap buffer overflow. This could lead to local denial of service with privileges of the attacker (User) and does not require user interaction to exploit. Affected patch/identifiers: ALPS10960023 (MT6880/68...

CVE-2026-20492

CVE-2026-20492 describes a race-condition in the Audio HAL that can cause the system to become unresponsive, leading to local denial of service with privileges of the user. Exploitation requires no user interaction, and the attack vector is local. Affected patch references include ALPS10960026 (f...

CVE-2026-20449

CVE-2026-20449 concerns a vulnerability in Modem where a heap buffer overflow can cause a system crash, leading to remote denial of service. Exploitation could occur if a device connects to a rogue base station controlled by an attacker, with no additional execution privileges and no user interac...

CVE-2026-20491

CVE-2026-20491 affects Med (MediaTek advisories) with an out-of-bounds write caused by an incorrect bounds check. This could enable local denial of service with low-privilege, local attacker without user interaction. Impact: availability loss; confidentiality/integrity not affected per the entry....

CVE-2026-20478

CVE-2026-20478 relates to the Audio HAL and describes a possible out-of-bounds write caused by a heap buffer overflow. The identified impact is local denial of service with user execution privileges required, and exploitation does not require user interaction. The description notes patches: ALPS1...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

CVE-2026-20450 affects the Modem component. The issue is a crash caused by incorrect error handling, which can lead to remote denial of service if a user equipment connects to a rogue base station controlled by an attacker. No user interaction is required; exploitation is scoped to adjacent acces...