CVE-2026-20498

CVE-2026-20498 affects the geniezone component. The issue is a missing permission check that can allow local privilege escalation if an attacker already has System privileges. Exploitation reportedly does not require user interaction. A patch/workaround is identified as Patch ID: ALPS10900493 (MS...

CVE-2026-20432

CVE-2026-20432 affects a MediaTek modem component, where a missing bounds check could allow an out-of-bounds write. The resulting impact is remote escalation of privilege if a UE connects to a rogue base station; exploitation requires user interaction. Patch MOLY01406170 (MSV-4461) is noted. Conn...

CVE-2026-20449

CVE-2026-20449 concerns a vulnerability in Modem where a heap buffer overflow can cause a system crash, leading to remote denial of service. Exploitation could occur if a device connects to a rogue base station controlled by an attacker, with no additional execution privileges and no user interac...

CVE-2026-20483

CVE-2026-20483 concerns the Telephony component, where a missing permission check enables local escalation of privilege without user interaction. The issue is described as allowing exploitation with only local access and no additional privileges, elevating from NONE. The available data identifies...

CVE-2026-20433

CVE-2026-20433 affects a MediaTek modem component where a missing bounds check enables an out-of-bounds write. This could allow remote escalation of privilege if a UE connects to a rogue base station, with no additional execution privileges required. Exploitation requires user interaction. Public...

CVE-2026-20451

CVE-2026-20451 affects the slbc component. An out-of-bounds write caused by type confusion could enable local privilege escalation to SYSTEM without user interaction. Patch ALPS10828685 (MSV-6504) addresses the issue. Exploitation details are not provided. CVSSv3.1 metrics: AV:L/AC:L/PR:H/UI:N/S:...

CVE-2026-20450

CVE-2026-20450 affects the Modem component. The issue is a crash caused by incorrect error handling, which can lead to remote denial of service if a user equipment connects to a rogue base station controlled by an attacker. No user interaction is required; exploitation is scoped to adjacent acces...

CVE-2026-20431

Summary: CVE-2026-20431 affects MediaTek-based Modem functionality where a logic error can cause a system crash, potentially enabling remote denial of service when a UE connects to a rogue base station. Exploitation reportedly requires no user interaction and can occur with adjacent access; no ad...