CVE-2026-20435

A logic error in the preloader of MediaTek chipsets (affecting approximately 875 million Android devices) allows for the reading of device unique identifiers. An attacker with physical access can exploit this via USB in under 45 seconds, even when the device is powered off, to bypass lock screens...

CVE-2024-20006

CVE-2024-20006 affects MediaTek components (DA module) and is due to an out-of-bounds write caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System execution privileges required; no user interaction is needed. Public references across Red Hat, NV...

CVE-2025-20656

A vulnerability exists in the DA component of MediaTek microprogramming software due to a missing bounds check , which leads to an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local privilege escalation and potentially expose prote...

CVE-2024-20104

A security vulnerability exists in MediaTek's microprogramming software due to a missing bounds check during the processing of DA files . This flaw allows for out-of-bounds writes in memory, which an attacker can exploit to achieve local escalation of privilege . Successful exploitation requires ...

CVE-2023-32871

A security vulnerability exists in the DA module of MediaTek chips due to an incorrect status check . This flaw allows for a permission bypass that could lead to local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is associated with Pat...

CVE-2024-20040

A security vulnerability exists in the wlan firmware of MediaTek chips (specifically MT6XXX and MT79XX chipsets) due to improper input validation . This flaw allows for a possible out-of-bounds write , which could lead to remote escalation of privilege without requiring additional execution privi...

CVE-2024-20056

A vulnerability in the preloader component of MediaTek hardware allows for a local elevation of privilege due to an insecure default value. Successful exploitation can lead to the execution of code with System privileges and does not require user interaction. This issue was addressed in the 2024-...

CVE-2024-20144

A security vulnerability exists in MediaTek Chipsets within the V6 DA module due to a missing bounds check . This flaw can lead to an out-of-bounds write , potentially allowing an attacker with physical access to the device to achieve local escalation of privilege . No additional execution privil...

CVE-2024-20023

A vulnerability exists in the flashc component of MediaTek hardware due to a lack of validation, leading to a possible out-of-bounds write . An attacker with System execution privileges could exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploi...

CVE-2024-20143

The software V6 DA is vulnerable to an out-of-bounds write caused by a missing bounds check . This security flaw could enable a local escalation of privilege for an attacker with physical access to the device, requiring no additional execution privileges but necessitating user interaction for exp...

CVE-2025-20635

CVE-2025-20635 concerns MediaTek V6 DA with a missing bounds check in the DA module, enabling a possible out-of-bounds write and local elevation of privilege if an attacker has physical access to the device. Exploitation requires user interaction; no remote/vector details are provided. The patch ...

CVE-2023-20829

The CVE-2023-20829 issue affects the gps component in MediaTek-based devices, caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation to SYSTEM with no user interaction required, per the description. Reported under various feeds (NVD, Red ...

CVE-2024-20145

A security vulnerability exists in MediaTek Chipsets within the V6 DA module due to a missing bounds check. This flaw allows for a possible out-of-bounds write , which could lead to local escalation of privilege . Exploitation requires physical access to the device and user interaction , but no a...

CVE-2023-20832

The CVE-2023-20832 entry relates to gps with a potential out-of-bounds write due to a missing bounds check. Impact is local privilege escalation with System privileges required and no user interaction. A fix is referenced as Patch ID ALPS08014144 / Issue ID ALPS08013530; apply the patch to mitiga...

CVE-2024-20049

The flashc module in MediaTek chips is vulnerable to an information disclosure vulnerability caused by an uncaught exception . Exploitation requires System execution privileges and does not require user interaction. While technical details regarding the specific information disclosed are not prov...

CVE-2023-20725

CVE-2023-20725 affects MediaTek chip preloader: an out-of-bounds write caused by a missing bounds check can lead to local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. Affected devices/versions include MT6880, MT6890, MT6980, and MT6...

CVE-2024-20081

A vulnerability exists in the gnss service due to an out-of-bounds write caused by improper input validation. This flaw allows for a local escalation of privilege to System execution privileges. Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS08719602 (I...

CVE-2023-20830

The CVE-2023-20830 entry describes a local out-of-bounds write in gps on MediaTek chips due to a missing bounds check. This could allow local escalation of privilege with System execution privileges; user interaction is not required. The issue is associated with a patch ID ALPS08014144 and an Iss...

CVE-2024-20050

A security vulnerability exists in the flashc module within MediaTek chips. The issue is caused by an uncaught exception , which could lead to local information disclosure . Exploitation requires System execution privileges and does not require user interaction. While the technical impact is clas...

CVE-2023-20828

The CVE-2023-20828 issue affects the gps component in MediaTek chips (GPS) with an out-of-bounds write caused by a missing bounds check. This can lead to local privilege escalation with SYSTEM rights and does not require user interaction. Affected details are supported by multiple sources (NVD/Re...

CVE-2024-20051

The flashc module in MediaTek chips is vulnerable to a system crash caused by an uncaught exception . This flaw can lead to a local denial of service (DoS) when triggered with System execution privileges . Exploitation does not require user interaction. While specific affected versions are not li...

CVE-2024-20107

A security vulnerability exists in the da component of MediaTek MT8676 chipsets due to a missing bounds check . This flaw allows for an out-of-bounds read , which could result in local information disclosure without requiring additional execution privileges or user interaction. While a patch ID (...

CVE-2024-20054

A security vulnerability exists in the gnss module of MediaTek chips due to a missing bounds check . This flaw could lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is identified by Patch ID: ALPS085802...

CVE-2023-20790

The CVE-2023-20790 entry maps to MediaTek devices with an nvram module vulnerability caused by a missing bounds check, leading to an out-of-bounds write. This can result in local information disclosure and, per the description, requires system execution privileges with no user interaction. Public...

CVE-2024-20053

The flashc module in MediaTek chips is vulnerable to an out-of-bounds write caused by an uncaught exception . This vulnerability could lead to a local escalation of privilege , requiring System execution privileges for exploitation. No user interaction is required. Remediation is identified by Pa...

CVE-2023-20821

CVE-2023-20821 concerns an out-of-bounds write in nvram due to a missing bounds check in MediaTek-based hardware. The underlying issue can allow local escalation of privilege with System execution privileges required, and exploitation does not require user interaction. Reported remediation refere...

CVE-2024-20052

A security vulnerability exists in the flashc module of MediaTek chips due to an uncaught exception . This flaw can result in local information disclosure when performed by an attacker with System execution privileges . No user interaction is required for exploitation. Remediation is addressed vi...

CVE-2025-20650

A security vulnerability exists in MediaTek Chipsets due to a missing bounds check , which can result in an out-of-bounds write . This flaw could allow for a local escalation of privilege if an attacker has physical access to the device, requiring no additional execution privileges but necessitat...

CVE-2025-20696

A vulnerability exists in DA (affected versions not specified) where a missing bounds check leads to a possible out-of-bounds write . An attacker with physical access to the device and user interaction can exploit this flaw to achieve local escalation of privilege without requiring additional exe...

CVE-2024-20085

CVE-2024-20085 concerns MediaTek Power component vulnerability: a missing bounds check in the power handling can trigger an out-of-bounds read, enabling local information disclosure and potentially system-level execution privileges. Affected: MediaTek chips (power domain); root cause: out-of-boun...

CVE-2024-20080

A security vulnerability exists in the gnss service of MediaTek chips due to improper certificate validation . This flaw allows an attacker to achieve a remote escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch...

CVE-2023-20796

The CVE-2023-20796 vulnerability affects MediaTek devices in the power module. It is a memory corruption issue caused by an incorrect bounds check, leading to local denial of service with system execution privileges required; no user interaction is needed. A patch is available (ALPS07929790). Exp...

CVE-2025-20651

A buffer error vulnerability exists in MediaTek Chipsets due to a missing bounds check , resulting in a possible out-of-bounds read . If an attacker has physical access to the device, this could lead to local information disclosure without requiring additional execution privileges. Exploitation r...

CVE-2024-20084

CVE-2024-20084 affects MediaTek power components. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with System execution privileges required; exploitation is not user-initiated. Patch ALPS08944210 is noted (Issue MSV-15...

CVE-2024-20089

CVE-2024-20089 affects MediaTek wlan in various MediaTek chipsets. The vulnerability stems from incorrect error handling in the wlan component, enabling a remote denial of service without user interaction. The issue is classified with a HIGH impact (Availability) and NETWORK attack vector, with n...

CVE-2023-20831

The CVE-2023-20831 issue affects the gps component and is described as an out-of-bounds write caused by a missing bounds check. The underlying effect is local escalation of privilege with SYSTEM execution privileges required, and exploitation does not require user interaction. The available docum...

CVE-2024-20136

A security vulnerability exists in MediaTek Chipsets due to a missing bounds check in the da component. This flaw allows for an out-of-bounds read , which can result in local information disclosure . Exploitation does not require additional execution privileges or user interaction. Remediation is...

CVE-2023-32855

CVE-2023-32855 describes a privilege-escalation defect in the aee module (MediaTek context) caused by a missing permission check, enabling local escalation to System privileges without user interaction. Exploitation status is not detailed in the provided documents. A fix is referenced as Patch ID...

CVE-2025-20722

A security vulnerability exists in the gnss driver within MediaTek Chipsets , caused by an integer overflow that leads to an out-of-bounds read . If a malicious actor already possesses System privileges , they could exploit this flaw to cause local information disclosure . No user interaction is ...

CVE-2025-20730

A local privilege escalation vulnerability exists in the preloader of MediaTek Chipsets due to an insecure default value . A malicious actor who has already obtained System privileges can exploit this flaw to achieve elevated privileges without user interaction. Technical details indicate a logic...

CVE-2025-20746

A security vulnerability exists in the gnss service within MediaTek Chipsets and Qualcomm GNSS Service (affected versions not specified) due to an incorrect bounds check . This flaw allows for a possible out-of-bounds write , which could lead to a local escalation of privilege if an attacker has ...

CVE-2025-20747

A vulnerability exists in the gnss service of MediaTek Chipsets and Qualcomm Snapdragon GNSS due to an incorrect bounds check, which can lead to an out-of-bounds write . A malicious actor who has already obtained System privileges could exploit this to achieve local escalation of privilege withou...