TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5
Out-of-bounds write in MediaTek modem could allow privilege escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Mt2716 Firmware · all components
TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v
Out-of-bounds write in MediaTek modem chipsets enables escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99
Out-of-bounds write in MediaTek modem chipsets
Priority LOW 33
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67588 CVE-2026-20543 · GHSA-xph5-44g7-gggh
Information disclosure in MediaTek modem due to a logic error
Priority LOW 24
In Modem, there is a possible information disclosure due to a logic error.
TI-2026-16644 CVE-2026-20503 · GHSA-x74h-78mc-6jq7
Reachable assertion in MediaTek chipset
Priority LOW 24
In Modem, there is a possible system crash due to a missing bounds check.
TI-2026-67586 CVE-2026-20541 · GHSA-3hgh-w6pp-p4rg
Out of bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67585 CVE-2026-20540 · GHSA-qcwv-wm5j-jgj5
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67584 CVE-2026-20539 · GHSA-gx55-632p-3gpx
Out-of-bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67583 CVE-2026-20538 · GHSA-h6c4-mvxr-gf42
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67579 CVE-2026-20534 · GHSA-vv5q-53j2-fq73
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to an incorrect bounds check.
TI-2026-67572 CVE-2026-20527 · GHSA-4j3w-6745-4v34
Missing bounds check in MediaTek modem can crash the system
Priority LOW 23
In Modem, there is a possible system crash due to a missing bounds check.
TI-2026-67570 CVE-2026-20525 · GHSA-gr3f-92cw-g5f6
Modem crash from improper input validation in MediaTek chipsets
Priority LOW 23
In Modem, there is a possible system crash due to improper input validation.
TI-2026-16641 CVE-2026-20500 · GHSA-3wwc-gvmj-fpx5
Improper certificate validation in MediaTek chipset
Priority LOW 22
In Modem, there is a possible system crash due to improper input validation.