Read the docs

MediaTek

Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9

Exploited now

MediaTek records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1134 records

TI-2020-00067 CVE-2020-0069 · GHSA-xx48-fp29-wh9j

Out-of-bounds write in Android

Priority CRITICAL 93KEV

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01382 Published 2020-03-10 No fix listed CWE-787
TI-2022-14283 CVE-2022-32665 · GHSA-pj6m-6h37-qw44

Command injection in MediaTek EN7528, EN7580

Priority MEDIUM 52

In Boa, there is a possible command injection due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01576 Published 2023-01-03 No fix listed CWE-77
TI-2021-11684 CVE-2021-31575 · GHSA-jr6c-jc92-gv6c

Command injection in MediaTek EN7528, EN7580

Priority MEDIUM 52

In Config Manager, there is a possible command injection due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01679 Published 2023-02-06 No fix listed CWE-77
TI-2021-11683 CVE-2021-31574 · GHSA-qprx-rfxr-x663

Command injection in MediaTek EN7528, EN7580

Priority MEDIUM 52

In Config Manager, there is a possible command injection due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01679 Published 2023-02-06 No fix listed CWE-77
TI-2021-11682 CVE-2021-31573 · GHSA-wgxw-vjvf-vr8h

Command injection in MediaTek EN7528, EN7580

Priority MEDIUM 52

In Config Manager, there is a possible command injection due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01679 Published 2023-02-06 No fix listed CWE-77
Priority MEDIUM 50

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00635 Published 2025-07-08 No fix listed CWE-787
Load more
Open these records in search →