CVE-2022-26437

CVE-2022-26437 affects the httpclient component, with an out-of-bounds write caused by uninitialized data. The described impact is a remote escalation of privilege without extra execution privileges, and exploitation does not require user interaction. Patch reference: WSAP00103831 (Issue ID WSAP0...

CVE-2025-20677

A vulnerability exists in the MediaTek Bluetooth driver software, specifically related to pointer assignment errors . This flaw can lead to an uncaught exception , resulting in a system crash or service failure. An attacker with User execution privileges can trigger this local denial of service w...

CVE-2025-20676

A NULL Pointer Dereference vulnerability exists in the wlan STA driver microprogramming software of MediaTek Chipsets . This flaw is caused by an uncaught exception and pointer assignment errors , which can lead to a local denial of service (DoS) . Exploitation requires User execution privileges ...

CVE-2026-20407

The wlan STA driver in MediaTek Chipsets is vulnerable to a local escalation of privilege due to a missing bounds check . An attacker with User execution privileges can exploit this flaw to gain elevated permissions without requiring user interaction. While specific affected versions are not prov...

CVE-2026-20419

A vulnerability exists in MediaTek Wireless LAN Drivers (wlan AP/STA firmware) where an uncaught exception can cause the system to become irresponsive. This flaw may allow for a remote (proximal/adjacent) denial of service without requiring additional execution privileges or user interaction. Aff...

CVE-2025-20680

A security vulnerability exists in the Bluetooth driver of MediaTek chipsets. The flaw is caused by an incorrect bounds check leading to an out-of-bounds write in the driver's firmware microprogramming software (specifically a heap-based buffer overflow in dynamic memory). Exploitation of this vu...

CVE-2025-20687

A vulnerability exists in the MediaTek Bluetooth driver microprogramming software due to an incorrect bounds check that leads to an out-of-bounds read in memory. This flaw could allow an attacker to trigger a service failure , resulting in a local denial of service . Exploitation requires User ex...

CVE-2026-20423

A vulnerability exists in the wlan STA driver used by MediaTek chipsets and certain HP PC products , caused by a missing bounds check . This flaw allows for an out-of-bounds write , which could result in a local escalation of privilege requiring user execution privileges. No user interaction is n...

CVE-2026-20436

A missing bounds check in the wlan STA driver of MediaTek chipsets (specifically affecting some HP PC products) can lead to a local escalation of privilege . If a malicious actor has already obtained System privilege , they can exploit this vulnerability to further increase their privileges. No u...