CVE-2026-20497

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor with existing System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch IDs ALPS10965...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check , which can lead to an out-of-bounds write . An attacker controlling a rogue base station could exploit this to achieve remote escalation of privilege if a user equipment (UE) connects to it. Exploita...

CVE-2026-20498

The geniezone software is vulnerable to a local escalation of privilege caused by a missing permission check . This vulnerability allows an attacker who has already obtained System privilege to escalate their privileges further without requiring user interaction. To remediate this issue, users sh...

CVE-2026-20481

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ...

CVE-2026-20484

A missing permission check in TFA leads to a possible information disclosure vulnerability. If a malicious actor has already obtained System privilege , they can perform a local information disclosure without requiring user interaction. Remediation is available via Patch ID: ALPS11053160 (Issue I...

CVE-2026-20449

A heap buffer overflow in the Modem component of MediaTek Chipsets can cause a system crash, leading to a remote denial of service . This vulnerability is triggered when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user in...

CVE-2026-20496

The geniezone component is vulnerable to an out of bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this to cause local information disclosure . No user interaction is required for exploitation. Remediation is available via Patch ID: ALP...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20483

A vulnerability exists in Telephony due to a missing permission check , which can lead to a local escalation of privilege . This flaw allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. Remediation information is provided via Patch...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

A vulnerability exists in the Modem component of MediaTek Chipsets (specifically identified in MediaTek MT2735 ) due to incorrect error handling . An attacker controlling a rogue base station can trigger a system crash, resulting in a remote denial of service when a User Equipment (UE) connects t...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20431

A logic error in the Modem component of MediaTek Chipsets can cause a system crash. This vulnerability may lead to a remote denial of service (DoS) if a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requi...

CVE-2026-20500

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw results in a local denial of service and requires User execution privileges and user interaction for exploitation. Remediation is available via Patch ID: MOLY01810811 (Iss...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20503

A missing bounds check in the Modem component can lead to a system crash , resulting in a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The exploit requires no additional execution privileges and...