Vendor CVEs

Mediatek

All CVEs

1,216 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-20044	Mediatek da	Med	0.43	6.6	0.00	Apr 1, 2024	In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784.
CVE-2024-20043	Mediatek da	Med	0.43	6.6	0.00	Apr 1, 2024	In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541781; Issue ID: ALPS08541781.
CVE-2024-20042	Mediatek da	Med	0.43	6.6	0.00	Apr 1, 2024	In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541780; Issue ID: ALPS08541780.
CVE-2024-20028	Mediatek da	Med	0.43	6.6	0.00	Mar 4, 2024	In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.
CVE-2022-26468	Mediatek preloader	Med	0.43	6.6	0.00	Sep 6, 2022	In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20074	Mediatek preloader	Med	0.43	6.6	0.00	Apr 11, 2022	In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed…
CVE-2022-20073	Mediatek preloader	Med	0.43	6.6	0.00	Apr 11, 2022	In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20069	Mediatek preloader	Med	0.43	6.6	0.00	Apr 11, 2022	In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20060	Mediatek preloader	Med	0.43	6.6	0.00	Mar 10, 2022	In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is…
CVE-2022-20059	Mediatek preloader	Med	0.43	6.6	0.00	Mar 10, 2022	In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20058	Mediatek preloader	Med	0.43	6.6	0.00	Mar 10, 2022	In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20056	Mediatek preloader	Med	0.43	6.6	0.00	Mar 10, 2022	In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2026-20482	Mediatek wlan STA FW	Med	0.42	6.5	0.00	Aug 3, 2026	In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID:…
CVE-2026-20464	Mediatek hevc decoder	Med	0.42	6.5	0.00	Aug 3, 2026	In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue…
CVE-2026-20454	Mediatek Mt6899 Firmware	Med	0.42	6.4	0.00	Jun 1, 2026	In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID:…
CVE-2026-20450	Mediatek Modem	Med	0.42	6.5	0.00	May 4, 2026	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20449	Mediatek Modem	Med	0.42	6.5	0.00	May 4, 2026	In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20431	Mediatek Modem	Med	0.42	6.5	0.00	Apr 7, 2026	In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20438	Mediatek MAE	Med	0.42	6.4	0.00	Mar 2, 2026	In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.
CVE-2026-20422	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20421	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20420	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20419	Mediatek wlan AP/STA firmware	Med	0.42	6.5	0.01	Feb 2, 2026	In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2026-20406	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20405	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20404	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20403	Mediatek Nr16	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20402	Mediatek Modem	Med	0.42	6.5	0.00	Feb 2, 2026	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20794	Mediatek Modem	Med	0.42	6.5	0.00	Jan 6, 2026	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20793	Mediatek Modem	Med	0.42	6.5	0.00	Jan 6, 2026	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20762	Mediatek Modem	Med	0.42	6.5	0.00	Jan 6, 2026	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20761	Mediatek Modem	Med	0.42	6.5	0.00	Jan 6, 2026	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20760	Mediatek Modem	Med	0.42	6.5	0.00	Jan 6, 2026	In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…
CVE-2025-20791	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20759	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed…
CVE-2025-20757	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20756	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20752	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20751	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20750	Mediatek Modem	Med	0.42	6.5	0.00	Dec 2, 2025	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20703	Mediatek Modem	Med	0.42	6.5	0.00	Sep 1, 2025	In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not…
CVE-2025-20695	Mediatek Bluetooth FW	Med	0.42	6.5	0.00	Jul 8, 2025	In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.
CVE-2025-20694	Mediatek Bluetooth FW	Med	0.42	6.5	0.00	Jul 8, 2025	In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.
CVE-2025-20693	Mediatek wlan STA driver	Med	0.42	6.5	0.00	Jul 8, 2025	In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20678	Mediatek ims service	Med	0.42	6.5	0.00	Jun 2, 2025	In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed…
CVE-2025-37917	Linux Kernel	Hig	0.42	7.5	0.00	May 20, 2025	In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spin_lock_irqsave and spin_unlock_irqrestore instead of spin_lock and spin_unlock in mtk_star_emac driver to avoid spinlock…
CVE-2025-20659	Mediatek Modem	Med	0.42	6.5	0.00	Apr 7, 2025	In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20653	Mediatek da	Med	0.42	6.5	0.00	Mar 3, 2025	In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:…
CVE-2025-20649	Mediatek Bluetooth Stack SW	Med	0.42	6.5	0.00	Mar 3, 2025	In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20647	Mediatek Modem	Med	0.42	6.5	0.00	Mar 3, 2025	In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…

CVE-2024-20044MedApr 1, 2024
Mediatek
da
risk 0.43cvss 6.6epss 0.00
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784.
CVE-2024-20043MedApr 1, 2024
Mediatek
da
risk 0.43cvss 6.6epss 0.00
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541781; Issue ID: ALPS08541781.
CVE-2024-20042MedApr 1, 2024
Mediatek
da
risk 0.43cvss 6.6epss 0.00
In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541780; Issue ID: ALPS08541780.
CVE-2024-20028MedMar 4, 2024
Mediatek
da
risk 0.43cvss 6.6epss 0.00
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541687.
CVE-2022-26468MedSep 6, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20074MedApr 11, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed…
CVE-2022-20073MedApr 11, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20069MedApr 11, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20060MedMar 10, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is…
CVE-2022-20059MedMar 10, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20058MedMar 10, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2022-20056MedMar 10, 2022
Mediatek
preloader
risk 0.43cvss 6.6epss 0.00
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for…
CVE-2026-20482MedAug 3, 2026
Mediatek
wlan STA FW
risk 0.42cvss 6.5epss 0.00
In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID:…
CVE-2026-20464MedAug 3, 2026
Mediatek
hevc decoder
risk 0.42cvss 6.5epss 0.00
In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue…
CVE-2026-20454MedJun 1, 2026
Mediatek
Mt6899 Firmware
risk 0.42cvss 6.4epss 0.00
In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID:…
CVE-2026-20450MedMay 4, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20449MedMay 4, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20431MedApr 7, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20438MedMar 2, 2026
Mediatek
MAE
risk 0.42cvss 6.4epss 0.00
In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.
CVE-2026-20422MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20421MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20420MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20419MedFeb 2, 2026
Mediatek
wlan AP/STA firmware
risk 0.42cvss 6.5epss 0.01
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2026-20406MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20405MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20404MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20403MedFeb 2, 2026
Mediatek
Nr16
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-20402MedFeb 2, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20794MedJan 6, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20793MedJan 6, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20762MedJan 6, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20761MedJan 6, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20760MedJan 6, 2026
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…
CVE-2025-20791MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20759MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed…
CVE-2025-20757MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20756MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20752MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20751MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20750MedDec 2, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20703MedSep 1, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not…
CVE-2025-20695MedJul 8, 2025
Mediatek
Bluetooth FW
risk 0.42cvss 6.5epss 0.00
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.
CVE-2025-20694MedJul 8, 2025
Mediatek
Bluetooth FW
risk 0.42cvss 6.5epss 0.00
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.
CVE-2025-20693MedJul 8, 2025
Mediatek
wlan STA driver
risk 0.42cvss 6.5epss 0.00
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20678MedJun 2, 2025
Mediatek
ims service
risk 0.42cvss 6.5epss 0.00
In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed…
CVE-2025-37917HigMay 20, 2025
Linux
Kernel
risk 0.42cvss 7.5epss 0.00
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spin_lock_irqsave and spin_unlock_irqrestore instead of spin_lock and spin_unlock in mtk_star_emac driver to avoid spinlock…
CVE-2025-20659MedApr 7, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…
CVE-2025-20653MedMar 3, 2025
Mediatek
da
risk 0.42cvss 6.5epss 0.00
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:…
CVE-2025-20649MedMar 3, 2025
Mediatek
Bluetooth Stack SW
risk 0.42cvss 6.5epss 0.00
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20647MedMar 3, 2025
Mediatek
Modem
risk 0.42cvss 6.5epss 0.00
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…

Page 16 of 25