CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds write . An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege if a user equipment (UE) connects to it. Exploita...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20490

A vulnerability exists in ccci due to a missing bounds check , which can lead to an out-of-bounds read . If an attacker has already obtained System privilege , this flaw could be exploited to cause a local denial of service . No user interaction is required for exploitation. Remediation is availa...

CVE-2026-20476

A missing bounds check in ccci results in a possible out of bounds read . This vulnerability could lead to a local denial of service (DoS). Exploitation requires User execution privileges , while no user interaction is required. Remediation is available via Patch ID: ALPS10981532 (Issue ID: MSV-7...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20446

CVE-2026-20446 affects MediaTek chipsets’ secure boot implementation, with an out-of-bounds write caused by integer overflow that can lead to local denial of service when an attacker has physical access and user privileges. Exploitation requires no user interaction. A patch is available (ALPS0996...

CVE-2026-20431

A logic error in the Modem component of MediaTek Chipsets can cause a system crash. This vulnerability may lead to a remote denial of service (DoS) if a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requi...

CVE-2026-20519

A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...

CVE-2026-20520

A missing bounds check in the Modem component leads to a possible out-of-bounds write vulnerability. An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege when a User Equipment (UE) connects to it. This vulnerability requires no additional execu...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...

CVE-2026-20526

A vulnerability exists in the Modem component due to a missing bounds check , resulting in a possible out-of-bounds write . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could lead to remote escalation of privilege without requiring additional execution...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20527

The Modem component is susceptible to a system crash caused by a missing bounds check . This vulnerability can lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional privileges or user interaction are required for expl...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20528

A missing bounds check in ccci can lead to out-of-bounds write and read operations. This vulnerability may result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker has already obtained System privileges. User interaction is required for exploit...