CVE-2025-20659

A security vulnerability exists in MediaTek chipsets' Modem component due to improper input validation and reading data outside the permitted range in memory. This flaw allows a remote attacker to trigger a system crash , resulting in a remote denial of service (DoS) . The attack can be executed ...

CVE-2026-20447

The geniezone component, associated with MediaTek Chipsets , contains a buffer error vulnerability caused by a missing bounds check . This flaw can lead to a local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user interaction. ...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20589

A type confusion vulnerability in venc can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this flaw could be exploited to achieve a local escalation of privilege . No user interaction is required for exploitation. Remediation is available via Patch I...

CVE-2026-20588

A missing bounds check in mtee allows for a possible local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this vulnerability to elevate privileges further. No user interaction is required for exploitation. Remediation is available via Patch ID: A...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20579

A vulnerability in vdec allows for an out of bounds write caused by type confusion . This flaw could lead to a local escalation of privilege if an attacker has already secured System privileges. Exploitation does not require user interaction. Remediation information is available via Patch ID: ALP...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20587

A type confusion vulnerability in mtee could allow for a local escalation of privilege . If a malicious actor has already obtained System privilege , they can exploit this flaw to increase their permissions further. Exploitation does not require user interaction. Remediation is available via Patc...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20529

A missing bounds check in the battery component can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege if a malicious actor has already obtained System privilege , and does not require user interaction. Remediation is available via Patch ID: ALPS11276677 ...