CVE-2025-20659

MediaTek Chipsets and Modem components are affected by CVE-2025-20659 due to improper input validation . This vulnerability allows a remote attacker to trigger a system crash and result in a remote denial of service (DoS) . The attack can be executed if a User Equipment (UE) connects to a rogue b...

CVE-2026-20497

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could result in local escalation of privilege if a malicious actor has already acquired System privilege . Exploitation does not require user interaction. Remediation is available via Patch IDs ALPS10...

CVE-2026-20454

A race condition in the geniezone mechanism of MediaTek Chipsets leads to a possible out of bounds write . This vulnerability can be exploited by a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . No user interaction is required for exploitati...

CVE-2026-20432

A vulnerability exists in the Modem component of MediaTek Chipsets due to a missing bounds check. This flaw results in a possible out-of-bounds write , which could enable remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitati...

CVE-2026-20453

A vulnerability exists in the geniezone component of MediaTek Chipsets due to a missing bounds check . This flaw allows for an out-of-bounds write , which could lead to local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user in...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains an out-of-bounds write vulnerability caused by a missing bounds check . This flaw allows for a local escalation of privilege if a malicious actor has already obtained System privileges. Exploitation does not require user interaction. Remediati...

CVE-2026-20481

CVE-2026-20481 describes an out of bounds write vulnerability in geniezone resulting from a missing bounds check . This flaw could allow a malicious actor who has already obtained System privilege to achieve local escalation of privilege , and no user interaction is required for exploitation. Rem...

CVE-2026-20479

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out-of-bounds read . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could result in a remote denial of service (DoS) . Exploitation does not require additi...

CVE-2026-20449

A heap buffer overflow in the Modem component, specifically within MediaTek chipsets, can cause a system crash resulting in a remote denial of service (DoS) . This vulnerability occurs when a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution p...

CVE-2026-20496

A vulnerability exists in geniezone where a missing bounds check can lead to an out of bounds read . If a malicious actor has already obtained System privilege , this flaw could result in local information disclosure . Exploitation does not require user interaction. Remediation is available via P...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20450

A vulnerability exists in the Modem component of MediaTek chipsets (specifically MediaTek MT2735 ) due to incorrect error handling . This flaw can cause a system crash , leading to a remote denial of service (DoS) . The attack is feasible if a User Equipment (UE) connects to a rogue base station ...

CVE-2026-20504

A vulnerability in the Modem component can cause a system crash due to a missing bounds check . This flaw could lead to a remote denial of service if a user equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requir...

CVE-2026-20503

A missing bounds check in the Modem component can cause a system crash, leading to a remote denial of service . This vulnerability can be exploited if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are requi...