CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds write . An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege if a user equipment (UE) connects to it. Exploita...

CVE-2026-20484

A missing permission check in TFA leads to a possible information disclosure vulnerability. If a malicious actor has already obtained System privilege , they can perform a local information disclosure without requiring user interaction. Remediation is available via Patch ID: ALPS11053160 (Issue I...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20450

A vulnerability exists in the Modem component of MediaTek Chipsets (specifically identified in MediaTek MT2735 ) due to incorrect error handling . An attacker controlling a rogue base station can trigger a system crash, resulting in a remote denial of service when a User Equipment (UE) connects t...

CVE-2026-20431

A logic error in the Modem component of MediaTek Chipsets can cause a system crash. This vulnerability may lead to a remote denial of service (DoS) if a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requi...

CVE-2026-20500

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw results in a local denial of service and requires User execution privileges and user interaction for exploitation. Remediation is available via Patch ID: MOLY01810811 (Iss...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20519

A vulnerability in the Modem component exists due to a missing bounds check , which can lead to an out-of-bounds write . If a User Equipment (UE) connects to an attacker-controlled rogue base station , this could result in a remote escalation of privilege . No additional execution privileges or u...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...

CVE-2026-20520

A missing bounds check in the Modem component leads to a possible out-of-bounds write vulnerability. An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege when a User Equipment (UE) connects to it. This vulnerability requires no additional execu...

CVE-2026-20525

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw could result in a remote denial of service if a User Equipment (UE) connects to an attacker-controlled rogue base station. Exploitation requires no additional execution pr...

CVE-2026-20526

A vulnerability exists in the Modem component due to a missing bounds check , resulting in a possible out-of-bounds write . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could lead to remote escalation of privilege without requiring additional execution...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20527

The Modem component is susceptible to a system crash caused by a missing bounds check . This vulnerability can lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional privileges or user interaction are required for expl...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20533

A vulnerability in the display component allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor already possesses System privileges, they could exploit this flaw to gain further elevated permissions. This vulnerability does not require user interacti...