CVE-2025-20659

The CVE-2025-20659 entry concerns a vulnerability in Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and has an adjacent attack vector with no privileges require...

CVE-2026-20454

CVE-2026-20454 affects the geniezone component. The vulnerability is an out-of-bounds write caused by a race condition that could allow local escalation of privilege if an attacker already has System privileges. No user interaction is required. A patch is referenced: ALPS10873936 (MSV-6786). The ...

CVE-2026-20453

CVE-2026-20453 affects geniezone with a possible out-of-bounds write caused by a missing bounds check. The issue could enable local privilege escalation for an actor who already has System privileges, with no user interaction required. Patch ALPS10886526 (MSV-6791) is referenced as a fix. Exploit...

CVE-2026-20455

In geniezone, CVE-2026-20455 is an out-of-bounds write caused by a missing bounds check, leading to local escalation of privilege for an attacker who already has System privileges. Exploitation details are not publicly provided in the connected documents; the description notes no user interaction...

CVE-2026-20432

CVE-2026-20432 affects a MediaTek modem component, where a missing bounds check could allow an out-of-bounds write. The resulting impact is remote escalation of privilege if a UE connects to a rogue base station; exploitation requires user interaction. Patch MOLY01406170 (MSV-4461) is noted. Conn...

CVE-2026-20484

Technical details about CVE-2026-20484 are not publicly provided in the connected documents. The description notes local information disclosure and a patch ID, but no affected product/version specifics are given. Monitor for updates.

CVE-2026-20449

CVE-2026-20449 concerns a vulnerability in Modem where a heap buffer overflow can cause a system crash, leading to remote denial of service. Exploitation could occur if a device connects to a rogue base station controlled by an attacker, with no additional execution privileges and no user interac...

CVE-2026-20447

Technical details are not publicly available in the provided documents. Monitor for updates from referenced sources (geniezone, patch ALPS10724073, MSV-6296) for affected components, impact, and remediation.

CVE-2026-20451

CVE-2026-20451 affects the slbc component. An out-of-bounds write caused by type confusion could enable local privilege escalation to SYSTEM without user interaction. Patch ALPS10828685 (MSV-6504) addresses the issue. Exploitation details are not provided. CVSSv3.1 metrics: AV:L/AC:L/PR:H/UI:N/S:...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

CVE-2026-20450 affects the Modem component. The issue is a crash caused by incorrect error handling, which can lead to remote denial of service if a user equipment connects to a rogue base station controlled by an attacker. No user interaction is required; exploitation is scoped to adjacent acces...

CVE-2026-20431

Summary: CVE-2026-20431 affects MediaTek-based Modem functionality where a logic error can cause a system crash, potentially enabling remote denial of service when a UE connects to a rogue base station. Exploitation reportedly requires no user interaction and can occur with adjacent access; no ad...

CVE-2026-20448

In geniezone, CVE-2026-20448 is a local privilege-escalation vulnerability caused by a missing permission check. It could allow a user with System privileges to escalate further without user interaction. Patch ALPS10708513 (Issue MSV-6281) is referenced; no exploit details are provided in the doc...

CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20501

MediaTek's vdec (video decoder) is affected by a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privilege without requiring any prior execution privileges or user interaction. The vulnerability is rated CVSS 8.4 (HIGH) with impacts to confidentiality, int...

CVE-2026-20503

CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...

CVE-2026-20500

CVE-2026-20500 affects the Modem component in MediaTek devices. The vulnerability stems from improper input validation , which can cause a system crash resulting in a local denial of service . Exploitation requires User execution privileges and, per the vendor description, user interaction . The ...