CVE-2022-21744

CVE-2022-21744 concerns the Modem 2G RR from MediaTek, where a missing bounds check enables an out-of-bounds write in PNCD decoding that can cause remote code execution. Exploitation requires no user interaction and is possible over the network; the issue is cited with Patch ID MOLY00810064 and I...

CVE-2024-20039

A vulnerability exists in the modem protocol of MediaTek chips due to a missing bounds check, leading to a possible out-of-bounds write . This flaw could allow an attacker to achieve remote code execution without requiring additional execution privileges or user interaction. The issue is addresse...

CVE-2022-20083

CVE-2022-20083 affects the Modem 2G/3G CC. The issue is an out-of-bounds write caused by a missing bounds check during decoding of a combined FACILITY, enabling remote code execution with network access and no user interaction. Public references in the provided documents point to a patch ID MOLY0...

CVE-2025-20634

CVE-2025-20634 concerns MediaTek Modem firmware (notably MT8863 NR16/NR17 and related MT2737-based devices) where a missing bounds check enables an out-of-bounds write. The issue allows remote code execution over the network without user interaction, if the device connects to a rogue base station...

CVE-2025-20644

A memory corruption vulnerability exists in the MediaTek Modem component due to incorrect error handling. This flaw could allow a remote attacker to cause a denial of service if a User Equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges o...

CVE-2023-32890

CVE-2023-32890 affects MediaTek Modem EMM. The issue is a crash caused by improper input validation, enabling remote denial of service with no user interaction. Exploitation is possible over the network (per CVSS) and does not require privileges. A patch identified as MOLY01183647 (MSV-963) is pr...

CVE-2024-20082

A memory corruption vulnerability exists in the Modem component of MediaTek chips due to a missing bounds check. This flaw could allow an attacker to achieve remote code execution (RCE) without requiring additional execution privileges or user interaction. The vulnerability is addressed in securi...

CVE-2024-20066

The CVE-2024-20066 issue affects MediaTek Modem, caused by an incorrect bounds check leading to a possible out-of-bounds write. This enables remote denial of service with no privileges required and no user interaction needed. Remediation is available via patch MOLY01267281 (MSV-1477).

CVE-2023-20819

CVE-2023-20819 affects MediaTek’s CDMA PPP protocol component, where a missing bounds check can enable an out-of-bounds write and remote escalation of privilege with no user interaction. A patch is identified as MOLY01068234 (Issue ALPS08010003); exploitation status is not provided in the availab...

CVE-2023-32841

The CVE-2023-32841 entry affects MediaTek’s 5G Modem. The vulnerability arises from improper error handling in the 5G Modem, which can cause a system crash and remote denial of service when processing malformed RRC messages. Exploitation requires no user interaction and does not need additional e...

CVE-2023-20702

CVE-2023-20702 affects MediaTek 5G NRLC modules. The vulnerability is an invalid memory access in the 5G NRLC processing path caused by insufficient error handling when handling a 1-byte RLC SDU, which could lead to a remote denial of service without user interaction. The issue is discussed in mu...

CVE-2023-32842

CVE-2023-32842 affects the MediaTek 5G Modem. The vulnerability arises from improper error handling in the 5G Modem’s RRC message processing, leading to a system crash and remote denial of service without requiring user interaction or additional privileges. A patch was issued: MOLY01130256 (MSV-8...

CVE-2024-20067

A vulnerability exists in the modem component due to an out-of-bounds write caused by improper input invalidation. This flaw can be exploited to cause a remote denial of service without requiring additional execution privileges or user interaction. The vulnerability is associated with MediaTek co...

CVE-2024-20068

A vulnerability in the modem component allows for a system crash due to improper input validation . This flaw can be exploited to cause a remote denial of service without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: MOLY01270721 and Issue I...

CVE-2023-32874

CVE-2023-32874 is a MediaTek Modem IMS Stack vulnerability. The issue is a possible out-of-bounds write caused by a missing bounds check in the Modem IMS Stack, which the sources state could lead to remote code execution with no additional privileges and no user interaction required. The vulnerab...

CVE-2023-32843

CVE-2023-32843 affects the 5G Modem: a vulnerability due to improper error handling in processing RRC messages that can cause a system crash and remote denial of service. Exploitation requires no user interaction and no extra privileges. The issue is documented with a patch MOLY01130204 (MSV-849)...

CVE-2024-20150

A logic error in the Modem component of MediaTek Chipsets can lead to a system crash , resulting in a remote denial of service . The vulnerability requires no additional execution privileges and no user interaction for exploitation. While technical details on the specific software versions are no...

CVE-2025-20670

CVE-2025-20670 concerns a vulnerability in a Modem where improper certificate validation enables a permission bypass, potentially causing remote information disclosure if a UE connects to a rogue base station controlled by an attacker. Exploitation requires user interaction and the attacker would...

CVE-2023-32891

CVE-2023-32891 relates to an out-of-bounds write in the bluetooth service caused by improper input validation. Affected component is described as the Bluetooth service (no specific vendor/version in provided text beyond MediaTek-linked sources). The underlying root cause is input validation weakn...

CVE-2024-20151

A security vulnerability exists in the Modem module of MediaTek Chipsets due to an incorrect bounds check, which can result in an out-of-bounds write . This flaw allows a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not r...

CVE-2024-20131

A security vulnerability exists in the Modem component of MediaTek Chipsets due to an incorrect bounds check (CWE-787: Out-of-bounds Write). This flaw can lead to a local escalation of privilege , requiring System execution privileges for exploitation. Exploitation does not require user interacti...

CVE-2022-26446

CVE-2022-26446 affects the Modem 4G RRC. The root cause is improper input validation in handling certain SIB12 (CMAS message) input, causing a system crash and remote denial of service. Exploitation is described as possible without additional execution privileges and without user interaction. The...

CVE-2023-32888

Affected software: Modem IMS Call UA. Vulnerability: out-of-bounds write caused by a missing bounds check in the IMS Call UA module. Impact: remote denial of service with no privileges and no user interaction required. Exploitation: no explicit exploit details provided in the documents. Remediati...

CVE-2024-20149

A security vulnerability exists in the Modem module of MediaTek Chipsets due to improper input validation . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation requires no additional execution privileges and no user interaction. Remediation is avail...

CVE-2025-20647

A security vulnerability exists in the MediaTek Modem (5G modem technology) due to a missing bounds check (also described as a NULL Pointer Dereference ). This flaw can lead to a system crash and a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

CVE-2026-20422

A vulnerability in the Modem component of MediaTek Chipsets allows for a system crash due to improper input validation . An attacker can trigger a remote denial-of-service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privilege...

CVE-2023-32840

A security vulnerability exists in the modem CCCI module of MediaTek chips due to a missing bounds check. This flaw can result in an out-of-bounds write , potentially leading to a local escalation of privilege requiring System execution privileges and user interaction for exploitation. Remediatio...

CVE-2023-32886

Summary (CVE-2023-32886) In the Modem IMS SMS UA component, there is an out-of-bounds write caused by a missing bounds check. This can lead to remote denial of service with no extra execution privileges and no user interaction required. Public references consistently describe the issue as impacti...

CVE-2023-32845

CVE-2023-32845 concerns the 5G Modem and a vulnerability due to improper error handling that can cause a remote system crash leading to a denial of service when the modem processes malformed RRC messages. The issue does not require user interaction and can be exploited remotely (attack vector: ne...

CVE-2025-20678

A security vulnerability exists in the MediaTek Chip IMS service due to incorrect error handling . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) connects to a rogue base station controlled by an attacker; no add...

CVE-2023-32887

In Modem IMS Stack, a missing bounds check can cause a system crash leading to remote denial of service with no authentication or user interaction required. Affected: Modem IMS Stack (vendor/product not explicitly named in the document set). Root cause: out-of-bounds condition in the modular stac...

CVE-2024-20133

A security vulnerability exists in MediaTek Chipsets due to an incorrect bounds check in the Modem component. This flaw can lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is available via Patch ID: MOL...

CVE-2023-32844

The CVE-2023-32844 entry affects the 5G Modem, where improper error handling can cause a system crash leading to remote denial of service when processing malformed RRC messages. Exploitation requires no privileges and no user interaction. The vulnerability is mitigated by the patch MOLY01128524 (...

CVE-2023-32846

The CVE-2023-32846 issue affects the MediaTek 5G Modem and is caused by improper error handling in the RRC message processing. This can crash the system and enable remote denial of service without extra privileges or user interaction. A patch is indicated: MOLY01128524 (MSV-861). Affected behavio...

CVE-2025-20708

A buffer error vulnerability exists in MediaTek Modem , a 5G modem technology, due to an incorrect bounds check that leads to an out-of-bounds write . An attacker could leverage this to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by ...

CVE-2024-20132

A security vulnerability exists in MediaTek Chipsets within the Modem component. The flaw is caused by a Modem Task Boundary Check error that results in an out-of-bounds write . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges or u...

CVE-2025-20761

A vulnerability exists in the Modem component of MediaTek chipsets due to incorrect error handling. This flaw can lead to a system crash and remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by an attacker. The vulnerability requires no additional...

CVE-2024-20070

The modem component is vulnerable to an information disclosure due to the use of a risky cryptographic algorithm during connection establishment negotiation. If a weak encryption algorithm is utilized, this flaw can lead to remote information disclosure without requiring additional execution priv...

CVE-2026-20434

The Modem component in MediaTek Chipsets is vulnerable to an out-of-bounds write caused by a missing bounds check. This vulnerability could allow an attacker to achieve remote escalation of privilege if a User Equipment (UE) connects to a rogue base station controlled by the attacker. While no ad...

CVE-2025-20759

A security vulnerability exists in the Modem component (specifically identified in MediaTek Chipsets ) due to a missing bounds check . This flaw allows for an out-of-bounds read , which can be leveraged to trigger a remote denial of service (DoS) . Exploitation occurs if a User Equipment (UE) con...

CVE-2025-20794

A vulnerability exists in the Modem component of MediaTek chipsets due to improper input validation . This flaw can lead to a remote denial of service (DoS) by causing a system crash. Exploitation occurs if a user equipment (UE) connects to a rogue base station controlled by an attacker; notably,...

CVE-2026-20405

A missing bounds check in the Modem component of MediaTek Chipsets allows for a potential system crash. An attacker can trigger a remote denial-of-service (DoS) by having a User Equipment (UE) connect to a rogue base station under their control. This vulnerability requires no additional execution...

CVE-2025-20703

A buffer error vulnerability in the MediaTek Modem (5G modem technology) allows for an out-of-bounds read due to an incorrect boundary check. This vulnerability could lead to a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitati...

CVE-2025-20758

A security vulnerability exists in MediaTek Chipsets within the Modem component. The issue is caused by an uncaught exception that can trigger a system crash, leading to a remote denial of service (DoS) . This attack can be executed if a User Equipment (UE) connects to a rogue base station contro...

CVE-2026-20406

A vulnerability exists in the Modem component of MediaTek Chipsets caused by an uncaught exception . This flaw can lead to a system crash , potentially resulting in a remote denial-of-service (DoS) . The attack can be executed if a User Equipment (UE) connects to a rogue base station controlled b...

CVE-2026-20403

The Modem component in MediaTek Chipsets is vulnerable to a system crash due to a missing bounds check . An attacker can trigger a remote denial of service (DoS) if a User Equipment (UE) connects to a rogue base station controlled by the attacker. This exploit requires no additional execution pri...

CVE-2026-20404

A vulnerability exists in the MediaTek modem firmware message processing routines due to improper input validation (CWE-787). The flaw allows for an out-of-bounds write when the modem fails to properly validate the boundaries of incoming data before writing it to memory buffers. This can lead to ...

CVE-2026-20420

A vulnerability exists in the Modem component, specifically within MediaTek Chipsets , caused by incorrect error handling . An attacker can exploit this by tricking a User Equipment (UE) into connecting to a rogue base station , leading to a system crash and a remote denial of service (DoS) . Thi...

CVE-2025-20727

A heap buffer overflow vulnerability in the Modem software of MediaTek Chipsets and Huawei devices (affected versions not specified) allows for an out-of-bounds write . An attacker could exploit this by controlling a rogue base station to which a User Equipment (UE) connects, leading to a remote ...