CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2022-32663

CVE-2022-32663 concerns a vulnerability in a MediaTek Wi‑Fi driver where a null pointer dereference can crash the system, leading to a remote denial of service with no privileges or user interaction required. The CVE documentation (NVD/Red Hat entries) consistently describes the impact as a syste...

CVE-2022-32655

CVE-2022-32655 affects MediaTek Wi‑Fi driver components (e.g., MT5221, MT7603/7613, MT7615, MT7622/7628/7629, MT7663/7668, MT7682/7686/7687, MT7697, MT7902/7915/7916/7921, MT7981/7986, MT8167S, MT8175, MT8362A/8365, MT8385, MT8518S/8532, MT8695/8696/8788). The issue is reported as an undefined be...

CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2022-32654

CVE-2022-32654 affects the Wi‑Fi driver, with the root cause described as undefined behavior from incorrect error handling. Impact is local escalation of privileges with System execution privileges required and no user interaction needed. Public details confirm affected devices in MediaTek MTK ch...

CVE-2022-32656

The CVE-2022-32656 entry concerns a local escalation of privilege in MediaTek Wi-Fi drivers. Affected components include MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175,...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...