CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds write . An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege if a user equipment (UE) connects to it. Exploita...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20484

A missing permission check in TFA leads to a possible information disclosure vulnerability. If a malicious actor has already obtained System privilege , they can perform a local information disclosure without requiring user interaction. Remediation is available via Patch ID: ALPS11053160 (Issue I...

CVE-2026-20486

The imgsensor component is vulnerable to an application crash caused by incorrect error handling . If a malicious actor has already obtained System privilege , this vulnerability could lead to a local escalation of privilege . Exploitation does not require user interaction. Remediation is availab...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

A vulnerability exists in the Modem component of MediaTek Chipsets (specifically identified in MediaTek MT2735 ) due to incorrect error handling . An attacker controlling a rogue base station can trigger a system crash, resulting in a remote denial of service when a User Equipment (UE) connects t...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20519

A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20520

A missing bounds check in the Modem component leads to a possible out-of-bounds write vulnerability. An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege when a User Equipment (UE) connects to it. This vulnerability requires no additional execu...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...

CVE-2026-20526

A vulnerability exists in the Modem component due to a missing bounds check , resulting in a possible out-of-bounds write . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could lead to remote escalation of privilege without requiring additional execution...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20527

The Modem component is susceptible to a system crash caused by a missing bounds check . This vulnerability can lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional privileges or user interaction are required for expl...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20533

A vulnerability in the display component allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor already possesses System privileges, they could exploit this flaw to gain further elevated permissions. This vulnerability does not require user interacti...