VYPR
← Mediatek

Vendor CVEs

Mediatek

All CVEs

1,199 total · sorted by risk
  • CVE-2016-6492HigJan 12, 2017
    Mediatek
    soc driver
    risk 0.51cvss 7.8epss 0.01

    The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.

  • CVE-2016-8433HigJan 12, 2017
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require…

  • CVE-2016-3937HigOct 10, 2016
    Mediatek
    video driver
    risk 0.51cvss 7.8epss 0.01

    The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874.

  • CVE-2016-3936HigOct 10, 2016
    Mediatek
    video driver
    risk 0.51cvss 7.8epss 0.01

    The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568.

  • CVE-2016-3928HigOct 10, 2016
    Mediatek
    video driver
    risk 0.51cvss 7.8epss 0.01

    The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384.

  • CVE-2016-3795HigJul 11, 2016
    Mediatek
    MediaTek power driver
    risk 0.51cvss 7.8epss 0.00

    The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28085222 and MediaTek internal bug ALPS02677244.

  • CVE-2016-3774HigJul 11, 2016
    Mediatek
    MediaTek drivers
    risk 0.51cvss 7.8epss 0.00

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008609 and MediaTek internal bug ALPS02703102.

  • CVE-2016-3773HigJul 11, 2016
    Mediatek
    MediaTek drivers
    risk 0.51cvss 7.8epss 0.00

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008363 and MediaTek internal bug ALPS02703102.

  • CVE-2016-3772HigJul 11, 2016
    Mediatek
    MediaTek drivers
    risk 0.51cvss 7.8epss 0.00

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29008188 and MediaTek internal bug ALPS02703102.

  • CVE-2016-3771HigJul 11, 2016
    Mediatek
    MediaTek drivers
    risk 0.51cvss 7.8epss 0.00

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29007611 and MediaTek internal bug ALPS02703102.

  • CVE-2016-3770HigJul 11, 2016
    Mediatek
    MediaTek drivers
    risk 0.51cvss 7.8epss 0.00

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 28346752 and MediaTek internal bug ALPS02703102.

  • CVE-2016-2469HigJun 13, 2016
    Google
    Android
    risk 0.51cvss 7.8epss 0.01

    The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27531992.

  • CVE-2016-0820HigMar 12, 2016
    Mediatek
    Wi-Fi kernel driver
    risk 0.51cvss 7.8epss 0.01

    The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.

  • CVE-2026-20483HigAug 3, 2026
    Mediatek
    telephony
    risk 0.50cvss 7.7epss 0.00

    In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID:…

  • CVE-2026-20434HigMar 2, 2026
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…

  • CVE-2026-20401HigFeb 2, 2026
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2025-20726HigNov 4, 2025
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…

  • CVE-2025-20725HigNov 4, 2025
    Mediatek
    ims service
    risk 0.49cvss 7.5epss 0.01

    In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…

  • CVE-2025-20667HigMay 5, 2025
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.00

    In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is…

  • CVE-2025-20666HigMay 5, 2025
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for…

  • CVE-2025-20664HigApr 7, 2025
    Mediatek
    wlan AP driver
    risk 0.49cvss 7.5epss 0.01

    In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2025-20663HigApr 7, 2025
    Mediatek
    wlan AP driver
    risk 0.49cvss 7.5epss 0.01

    In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2025-20637HigFeb 3, 2025
    Mediatek
    network HW
    risk 0.49cvss 7.5epss 0.01

    In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.

  • CVE-2024-20153HigJan 6, 2025
    Mediatek
    wlan STA
    risk 0.49cvss 7.5epss 0.00

    In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442;…

  • CVE-2024-20150HigJan 6, 2025
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018.

  • CVE-2024-20149HigJan 6, 2025
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01231341 / MOLY01263331 / MOLY01233835; Issue…

  • CVE-2024-20138HigDec 2, 2024
    Mediatek
    wlan driver
    risk 0.49cvss 7.5epss 0.00

    In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.

  • CVE-2024-20137HigDec 2, 2024
    Mediatek
    wlan driver
    risk 0.49cvss 7.5epss 0.01

    In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543;…

  • CVE-2024-20129HigDec 2, 2024
    Mediatek
    telephony
    risk 0.49cvss 7.5epss 0.00

    In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2025.

  • CVE-2024-20128HigDec 2, 2024
    Mediatek
    telephony
    risk 0.49cvss 7.5epss 0.00

    In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2024.

  • CVE-2024-20127HigDec 2, 2024
    Mediatek
    telephony
    risk 0.49cvss 7.5epss 0.00

    In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2023.

  • CVE-2024-20094HigOct 7, 2024
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535.

  • CVE-2024-20089HigSep 2, 2024
    Mediatek
    wlan
    risk 0.49cvss 7.5epss 0.00

    In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08861558; Issue ID: MSV-1526.

  • CVE-2024-20077HigJul 1, 2024
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297807; Issue ID: MSV-1482.

  • CVE-2024-20076HigJul 1, 2024
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01297806; Issue ID: MSV-1481.

  • CVE-2024-20066HigJun 3, 2024
    Mediatek
    Modem
    risk 0.49cvss 7.5epss 0.01

    In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is no needed for exploitation. Patch ID: MOLY01267281; Issue ID: MSV-1477.

  • CVE-2024-20007HigFeb 5, 2024
    Mediatek
    mp3 decoder
    risk 0.49cvss 7.5epss 0.00

    In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369.

  • CVE-2024-20004HigFeb 5, 2024
    Mediatek
    Modem NL1
    risk 0.49cvss 7.5epss 0.01

    In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2024-20003HigFeb 5, 2024
    Mediatek
    Modem NL1
    risk 0.49cvss 7.5epss 0.01

    In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation.…

  • CVE-2023-32890HigJan 2, 2024
    Mediatek
    modem EMM
    risk 0.49cvss 7.5epss 0.01

    In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).

  • CVE-2023-32889HigJan 2, 2024
    Mediatek
    Modem IMS Call UA
    risk 0.49cvss 7.5epss 0.00

    In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID:…

  • CVE-2023-32888HigJan 2, 2024
    Mediatek
    Modem IMS Call UA
    risk 0.49cvss 7.5epss 0.01

    In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID:…

  • CVE-2023-32887HigJan 2, 2024
    Mediatek
    Modem IMS Stack
    risk 0.49cvss 7.5epss 0.01

    In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837…

  • CVE-2023-32886HigJan 2, 2024
    Mediatek
    Modem IMS SMS UA
    risk 0.49cvss 7.5epss 0.01

    In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807.

  • CVE-2023-32846HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2023-32845HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2023-32844HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2023-32843HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2023-32842HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2023-32841HigDec 4, 2023
    Mediatek
    5G Modem
    risk 0.49cvss 7.5epss 0.01

    In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

Page 5 of 24