CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check. This flaw results in a possible out-of-bounds write , which could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitati...

CVE-2026-20473

A memory corruption vulnerability exists in the Microsoft Display component due to a use after free condition. This flaw could allow a malicious actor who has already obtained System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation i...

CVE-2026-20484

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.

CVE-2026-20449

A heap buffer overflow in the Modem component, specifically within MediaTek chipsets, can cause a system crash resulting in a remote denial of service (DoS) . This vulnerability occurs when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution p...

CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

CVE-2026-20485

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.

CVE-2026-20488

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

CVE-2026-20486

A vulnerability exists in imgsensor where incorrect error handling can cause an application crash . If a malicious actor has already obtained System privilege , this flaw could lead to a local escalation of privilege . No user interaction is required for exploitation. Remediation is available via...

CVE-2026-20477

A vulnerability exists in the display component (associated with MediaTek in the provided references) where a missing bounds check can result in an out-of-bounds write . This flaw could allow an attacker who has already obtained System privileges to achieve a local escalation of privilege . Explo...

CVE-2026-20447

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296.

CVE-2026-20483

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.

CVE-2026-20489

A vulnerability exists in the display component where an integer overflow can lead to local information disclosure. This issue affects the system when a malicious actor has already obtained System privilege ; notably, no user interaction is required for exploitation. Remediation is available via ...

CVE-2026-20450

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

CVE-2026-20431

A logic error in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability can be exploited without additional execution privileges or user interaction if a user equipment (UE) connects to a rogue base station controlled by an at...

CVE-2026-20448

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.

CVE-2026-20500

CVE-2026-20500 affects the Modem component in MediaTek devices. The vulnerability stems from improper input validation , which can cause a system crash resulting in a local denial of service . Exploitation requires User execution privileges and, per the vendor description, user interaction . The ...

CVE-2026-20502

A missing bounds check in vdec leads to a possible out of bounds write . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is addressed in Patch ID: ALPS11262030 (Issue ID: MSV-9196). Exploitation de...

CVE-2026-20501

A heap buffer overflow in vdec can lead to an out of bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 (Issue ID: MSV-9197). Exploitation details are not ...

CVE-2026-20503

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...