CVE-2025-20659

MediaTek Chipsets and Modem components are affected by CVE-2025-20659 due to improper input validation . This vulnerability allows a remote attacker to trigger a system crash and result in a remote denial of service (DoS) . The attack can be executed if a User Equipment (UE) connects to a rogue b...

CVE-2026-20454

A race condition in the geniezone mechanism of MediaTek Chipsets leads to a possible out of bounds write . This vulnerability can be exploited by a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . No user interaction is required for exploitati...

CVE-2026-20453

A vulnerability exists in the geniezone component of MediaTek Chipsets due to a missing bounds check . This flaw allows for an out-of-bounds write , which could lead to local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user in...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check. This flaw results in a possible out-of-bounds write , which could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitati...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains an out-of-bounds write vulnerability caused by a missing bounds check . This flaw allows for a local escalation of privilege if a malicious actor has already obtained System privileges. Exploitation does not require user interaction. Remediati...

CVE-2026-20484

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.

CVE-2026-20449

A heap buffer overflow in the Modem component, specifically within MediaTek chipsets, can cause a system crash resulting in a remote denial of service (DoS) . This vulnerability occurs when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution p...

CVE-2026-20496

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.

CVE-2026-20483

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2026-20502

A missing bounds check in vdec leads to a possible out of bounds write . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is addressed in Patch ID: ALPS11262030 (Issue ID: MSV-9196). Exploitation de...

CVE-2026-20501

A heap buffer overflow in vdec can lead to an out of bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 (Issue ID: MSV-9197). Exploitation details are not ...

CVE-2026-20503

A missing bounds check in the Modem component can cause a system crash, leading to a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requi...