[ Vendor · 31 CVEs ]

MediaTek, Inc.

CVEs affecting MediaTek, Inc. published in the last 30 days, plus any MediaTek, Inc. CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-20588 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious…
CVE-2026-20589 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20540 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to…
CVE-2026-20541 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has…
CVE-2026-20542 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20543 5 Oct 2026 CVSS 5.5 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional…
CVE-2026-20544 5 Oct 2026 CVSS 6.8 MediaTek, Inc. MediaTek chipsetIn meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has…
CVE-2026-20579 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20586 5 Oct 2026 CVSS 8.8 MediaTek, Inc. MediaTek chipsetIn vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional…
CVE-2026-20587 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20532 5 Oct 2026 CVSS 6.2 MediaTek, Inc. MediaTek chipsetIn apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges…
CVE-2026-20533 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious…
CVE-2026-20534 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected…
CVE-2026-20535 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a…
CVE-2026-20536 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20537 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has…
CVE-2026-20538 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has…
CVE-2026-20539 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to…
CVE-2026-20524 5 Oct 2026 CVSS 8.4 MediaTek, Inc. MediaTek chipsetIn apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional…
CVE-2026-20525 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20526 5 Oct 2026 CVSS 7.5 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
CVE-2026-20527 5 Oct 2026 CVSS 5.3 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a…
CVE-2026-20528 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory…
CVE-2026-20529 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious…
CVE-2026-20530 5 Oct 2026 CVSS 6.7 MediaTek, Inc. MediaTek chipsetIn display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious…
CVE-2026-20531 5 Oct 2026 CVSS 8.4 MediaTek, Inc. MediaTek chipsetIn apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution…
CVE-2026-20519 5 Oct 2026 CVSS 7.5 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
CVE-2026-20520 5 Oct 2026 CVSS 7.5 MediaTek, Inc. MediaTek chipsetIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has…
CVE-2026-20521 5 Oct 2026 CVSS 8.4 MediaTek, Inc. MediaTek chipsetIn Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no…
CVE-2026-20522 5 Oct 2026 CVSS 8.4 MediaTek, Inc. MediaTek chipsetIn neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…
CVE-2026-20523 5 Oct 2026 CVSS 8.4 MediaTek, Inc. MediaTek chipsetIn neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…