CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20484

A missing permission check in TFA leads to a possible information disclosure vulnerability. If a malicious actor has already obtained System privilege , they can perform a local information disclosure without requiring user interaction. Remediation is available via Patch ID: ALPS11053160 (Issue I...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20533

A vulnerability in the display component allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor already possesses System privileges, they could exploit this flaw to gain further elevated permissions. This vulnerability does not require user interacti...

CVE-2026-20529

A missing bounds check in the battery component can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege if a malicious actor has already obtained System privilege , and does not require user interaction. Remediation is available via Patch ID: ALPS11276677 ...