CVE-2026-20452

A heap-based buffer overflow exists in the MediaTek WLAN AP driver , which can lead to memory corruption and remote code execution (proximal/adjacent). The vulnerability requires User execution privileges but does not require user interaction. Affected components include the wlan (AP driver) on c...

CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds write . An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege if a user equipment (UE) connects to it. Exploita...

CVE-2026-20479

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a User Equipment (UE) connects to it. This exploit requires no add...

CVE-2026-20480

A heap buffer overflow in the Audio HAL component allows for a possible out of bounds write . This vulnerability can lead to a local denial of service and requires User execution privileges to exploit, though no user interaction is necessary. Affected hardware includes models MT6880, MT6890, MT69...

CVE-2026-20492

A race condition in the Audio HAL component can cause a system to become unresponsive, leading to a local denial of service . Exploitation requires User execution privileges , but no user interaction is required. The vulnerability affects specific hardware, with remediation provided via Patch ID ...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20491

A vulnerability exists in mediatek (med) components where an incorrect bounds check can lead to an out-of-bounds write . This flaw could result in a local denial of service (DoS). Exploitation requires user execution privileges and does not require user interaction. Remediation is available via P...

CVE-2026-20478

A heap buffer overflow in the Audio HAL component can lead to an out-of-bounds write . This vulnerability allows for a local denial of service and requires User execution privileges for exploitation, though no user interaction is necessary. Affected hardware includes MT6880, MT6890, MT6988, MT699...

CVE-2026-20493

A missing bounds check in the wifi component can lead to a possible out of bounds write . This vulnerability could result in a local denial of service if an attacker has already obtained System privileges . Exploitation does not require user interaction. Remediation is available via Patch ID: BOR...

CVE-2026-20494

A vulnerability exists in the wifi component due to a missing bounds check , leading to a possible out of bounds read . If a malicious actor has already obtained System privilege , this flaw could result in local information disclosure . No user interaction is required for exploitation. Remediati...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

A vulnerability exists in the Modem component of MediaTek Chipsets (specifically identified in MediaTek MT2735 ) due to incorrect error handling . An attacker controlling a rogue base station can trigger a system crash, resulting in a remote denial of service when a User Equipment (UE) connects t...

CVE-2026-20519

A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...

CVE-2026-20504

A missing bounds check in the Modem component can cause a system crash, leading to a remote denial of service . This vulnerability is exploitable without additional execution privileges or user interaction if a UE connects to an attacker-controlled rogue base station . Remediation is available vi...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...

CVE-2026-20520

A missing bounds check in the Modem component leads to a possible out-of-bounds write vulnerability. An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege when a User Equipment (UE) connects to it. This vulnerability requires no additional execu...

CVE-2026-20526

A vulnerability exists in the Modem component due to a missing bounds check , resulting in a possible out-of-bounds write . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could lead to remote escalation of privilege without requiring additional execution...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20527

The Modem component is susceptible to a system crash caused by a missing bounds check . This vulnerability can lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional privileges or user interaction are required for expl...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20528

A missing bounds check in ccci can lead to out-of-bounds write and read operations. This vulnerability may result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker has already obtained System privileges. User interaction is required for exploit...