CVE-2022-21744

CVE-2022-21744 concerns the Modem 2G RR from MediaTek, where a missing bounds check enables an out-of-bounds write in PNCD decoding that can cause remote code execution. Exploitation requires no user interaction and is possible over the network; the issue is cited with Patch ID MOLY00810064 and I...

CVE-2024-20039

A vulnerability exists in the modem protocol of MediaTek chips due to a missing bounds check, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. The issue is addresse...

CVE-2022-20083

CVE-2022-20083 affects the Modem 2G/3G CC. The issue is an out-of-bounds write caused by a missing bounds check during decoding of a combined FACILITY, enabling remote code execution with network access and no user interaction. Public references in the provided documents point to a patch ID MOLY0...

CVE-2025-20644

A memory corruption vulnerability exists in the MediaTek Modem component due to incorrect error handling. This flaw could allow a remote attacker to cause a denial of service if a User Equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges o...

CVE-2025-20666

CVE-2025-20666 affects MediaTek’s Modem component. The issue is an uncaught exception in Modem that can crash the system, enabling remote denial-of-service when a UE connects to a rogue base station; no user interaction or additional privileges are required. Patch MOLY00650610 (Issue MSV-2933) is...

CVE-2023-32890

CVE-2023-32890 affects MediaTek Modem EMM. The issue is a crash caused by improper input validation, enabling remote denial of service with no user interaction. Exploitation is possible over the network (per CVSS) and does not require privileges. A patch identified as MOLY01183647 (MSV-963) is pr...

CVE-2024-20082

A memory corruption vulnerability exists in the Modem component of MediaTek chips due to a missing bounds check. This flaw could allow an attacker to achieve remote code execution (RCE) without requiring additional execution privileges or user interaction. The vulnerability is addressed in securi...

CVE-2023-20819

CVE-2023-20819 affects MediaTek’s CDMA PPP protocol component, where a missing bounds check can enable an out-of-bounds write and remote escalation of privilege with no user interaction. A patch is identified as MOLY01068234 (Issue ALPS08010003); exploitation status is not provided in the availab...

CVE-2024-20003

CVE-2024-20003 affects MediaTek Modem NL1. The issue is an input-validation weakness in the Modem NL1 that can cause a system crash and remote denial of service when an invalid NR RRC Connection Setup message is received. Exploitation requires no user interaction and no extra privileges. A patch ...

CVE-2023-32841

The CVE-2023-32841 entry affects MediaTek’s 5G Modem. The vulnerability arises from improper error handling in the 5G Modem, which can cause a system crash and remote denial of service when processing malformed RRC messages. Exploitation requires no user interaction and does not need additional e...

CVE-2023-20702

CVE-2023-20702 affects MediaTek 5G NRLC modules. The vulnerability is an invalid memory access in the 5G NRLC processing path caused by insufficient error handling when handling a 1-byte RLC SDU, which could lead to a remote denial of service without user interaction. The issue is discussed in mu...

CVE-2021-40148

CVE-2021-40148 affects Modem EMM in Google Android devices. Root cause: missing data encryption in the modem EMM leads to information disclosure without privileges or user interaction. Impact: remote information disclosure. Remediation: patch MOLY00716585 (Issue ALPS05886933) has been released. E...

CVE-2023-32842

CVE-2023-32842 affects the MediaTek 5G Modem. The vulnerability arises from improper error handling in the 5G Modem’s RRC message processing, leading to a system crash and remote denial of service without requiring user interaction or additional privileges. A patch was issued: MOLY01130256 (MSV-8...

CVE-2024-20094

A security vulnerability exists in the Modem module of MediaTek chips due to a missing bounds check . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation does not require additional execution privileges or user interaction. Remediation is addressed ...

CVE-2023-32874

CVE-2023-32874 is a MediaTek Modem IMS Stack vulnerability. The issue is a possible out-of-bounds write caused by a missing bounds check in the Modem IMS Stack, which the sources state could lead to remote code execution with no additional privileges and no user interaction required. The vulnerab...

CVE-2023-32843

CVE-2023-32843 affects the 5G Modem: a vulnerability due to improper error handling in processing RRC messages that can cause a system crash and remote denial of service. Exploitation requires no user interaction and no extra privileges. The issue is documented with a patch MOLY01130204 (MSV-849)...

CVE-2024-20069

A vulnerability in the modem component allows for the selection of a less-secure algorithm during the VoWiFi IKE process due to a missing DH downgrade check . This flaw can lead to remote information disclosure without requiring additional execution privileges or user interaction. This issue affe...

CVE-2024-20150

A logic error in the Modem component of MediaTek Chipsets can lead to a system crash , resulting in a remote denial of service . The vulnerability requires no additional execution privileges and no user interaction for exploitation. While technical details on the specific software versions are no...

CVE-2023-32891

CVE-2023-32891 relates to an out-of-bounds write in the bluetooth service caused by improper input validation. Affected component is described as the Bluetooth service (no specific vendor/version in provided text beyond MediaTek-linked sources). The underlying root cause is input validation weakn...

CVE-2023-32888

Affected software: Modem IMS Call UA. Vulnerability: out-of-bounds write caused by a missing bounds check in the IMS Call UA module. Impact: remote denial of service with no privileges and no user interaction required. Exploitation: no explicit exploit details provided in the documents. Remediati...

CVE-2022-26446

CVE-2022-26446 affects the Modem 4G RRC. The root cause is improper input validation in handling certain SIB12 (CMAS message) input, causing a system crash and remote denial of service. Exploitation is described as possible without additional execution privileges and without user interaction. The...

CVE-2024-20149

A security vulnerability exists in the Modem module of MediaTek Chipsets due to improper input validation . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation requires no additional execution privileges and no user interaction. Remediation is avail...

CVE-2026-20422

A vulnerability in the Modem component of MediaTek Chipsets allows for a system crash due to improper input validation . An attacker can trigger a remote denial-of-service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privilege...

CVE-2023-32840

A security vulnerability exists in the modem CCCI module of MediaTek chips due to a missing bounds check. This flaw can result in an out-of-bounds write , potentially leading to a local escalation of privilege requiring System execution privileges and user interaction for exploitation. Remediatio...

CVE-2024-20004

CVE-2024-20004 affects Modem NL1. The issue is improper input validation in NR RRC Connection Setup handling, potentially causing a remote denial of service with no privileges and no user interaction. Documented base metrics show CVSS v3.1: 7.5 (HIGH) with NETWORK attack vector, LOW attack comple...

CVE-2025-20647

A security vulnerability exists in the MediaTek Modem (5G modem technology) due to a missing bounds check (also described as a NULL Pointer Dereference ). This flaw can lead to a system crash and a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

CVE-2023-32845

CVE-2023-32845 concerns the 5G Modem and a vulnerability due to improper error handling that can cause a remote system crash leading to a denial of service when the modem processes malformed RRC messages. The issue does not require user interaction and can be exploited remotely (attack vector: ne...

CVE-2025-20678

A security vulnerability exists in the MediaTek Chip IMS service due to incorrect error handling . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) connects to a rogue base station controlled by an attacker; no add...

CVE-2023-32886

Summary (CVE-2023-32886) In the Modem IMS SMS UA component, there is an out-of-bounds write caused by a missing bounds check. This can lead to remote denial of service with no extra execution privileges and no user interaction required. Public references consistently describe the issue as impacti...

CVE-2023-32887

In Modem IMS Stack, a missing bounds check can cause a system crash leading to remote denial of service with no authentication or user interaction required. Affected: Modem IMS Stack (vendor/product not explicitly named in the document set). Root cause: out-of-bounds condition in the modular stac...

CVE-2023-32844

The CVE-2023-32844 entry affects the 5G Modem, where improper error handling can cause a system crash leading to remote denial of service when processing malformed RRC messages. Exploitation requires no privileges and no user interaction. The vulnerability is mitigated by the patch MOLY01128524 (...

CVE-2023-32846

The CVE-2023-32846 issue affects the MediaTek 5G Modem and is caused by improper error handling in the RRC message processing. This can crash the system and enable remote denial of service without extra privileges or user interaction. A patch is indicated: MOLY01128524 (MSV-861). Affected behavio...

CVE-2025-20761

A vulnerability exists in the Modem component of MediaTek chipsets due to incorrect error handling. This flaw can lead to a system crash and remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The vulnerability requires no additional...

CVE-2025-20708

A buffer error vulnerability exists in MediaTek Modem , a 5G modem technology, due to an incorrect bounds check that leads to an out-of-bounds write . An attacker could leverage this to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by ...

CVE-2026-20434

The Modem component in MediaTek Chipsets is vulnerable to an out-of-bounds write caused by a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by the attacker. While no ad...

CVE-2024-20070

The modem component is vulnerable to an information disclosure due to the use of a risky cryptographic algorithm during connection establishment negotiation. If a weak encryption algorithm is utilized, this flaw can lead to remote information disclosure without requiring additional execution priv...

CVE-2026-20421

A vulnerability exists in Modem components, specifically within MediaTek Chipsets , caused by improper input validation . This flaw can lead to a remote denial-of-service (DoS) condition where the system crashes if a User Equipment (UE) connects to a rogue base station controlled by an attacker. ...

CVE-2025-20759

A security vulnerability exists in the Modem component (specifically identified in MediaTek Chipsets ) due to a missing bounds check . This flaw allows for an out-of-bounds read , which can be leveraged to trigger a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) con...

CVE-2025-20794

A vulnerability exists in the Modem component of MediaTek chipsets due to improper input validation . This flaw can lead to a remote denial of service (DoS) by causing a system crash. Exploitation occurs if a user equipment (UE) connects to a rogue base station controlled by an attacker; notably,...

CVE-2026-20405

A missing bounds check in the Modem component of MediaTek Chipsets allows for a potential system crash. An attacker can trigger a remote denial-of-service (DoS) by having a User Equipment (UE) connect to a rogue base station under their control. This vulnerability requires no additional execution...

CVE-2025-20703

A buffer error vulnerability in the MediaTek Modem (5G modem technology) allows for an out-of-bounds read due to an incorrect boundary check. This vulnerability could lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitati...

CVE-2026-20401

CVE-2026-20401 affects Modem. It describes a crash caused by an uncaught exception that could allow remote denial of service when a User Equipment connects to a rogue base station, with no additional execution privileges or user interaction required. A patch is listed as MOLY01738310 (MSV-5933). ...

CVE-2026-20406

A vulnerability exists in the Modem component of MediaTek Chipsets caused by an uncaught exception . This flaw can lead to a system crash , potentially resulting in a remote denial-of-service (DoS) . The attack can be executed if a User Equipment (UE) connects to a rogue base station controlled b...

CVE-2026-20420

A vulnerability exists in the Modem component, specifically within MediaTek Chipsets , caused by incorrect error handling . An attacker can exploit this by tricking a User Equipment (UE) into connecting to a rogue base station , leading to a system crash and a remote denial of service (DoS) . Thi...

CVE-2026-20403

The Modem component in MediaTek Chipsets is vulnerable to a system crash due to a missing bounds check . An attacker can trigger a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by the attacker. This exploit requires no additional execution pri...

CVE-2025-20758

A security vulnerability exists in MediaTek Chipsets within the Modem component. The issue is caused by an uncaught exception that can trigger a system crash, leading to a remote denial of service (DoS) . This attack can be executed if a User Equipment (UE) connects to a rogue base station contro...

CVE-2026-20404

A vulnerability exists in the MediaTek modem firmware message processing routines due to improper input validation (CWE-787). The flaw allows for an out-of-bounds write when the modem fails to properly validate the boundaries of incoming data before writing it to memory buffers. This can lead to ...

CVE-2026-20402

A vulnerability exists in the Modem component of MediaTek Chipsets due to improper input validation . This flaw can be exploited by an attacker controlling a rogue base station to trigger a system crash, resulting in a remote denial of service (DoS) . The vulnerability can be triggered when a use...

CVE-2025-20727

A heap buffer overflow vulnerability in the Modem software of MediaTek Chipsets and Huawei devices (affected versions not specified) allows for an out-of-bounds write . An attacker could exploit this by controlling a rogue base station to which a User Equipment (UE) connects, leading to a remote ...