TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
18 records in Mt6761 Firmware · all components
TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-16626 CVE-2026-20483 · GHSA-gp8p-m3ww-5f47
Missing authorization in MediaTek chipset
Priority LOW 35
In Telephony, there is a possible escalation of privilege due to a missing permission check.
TI-2026-16598 CVE-2026-20455 · GHSA-jf3x-c8h2-5gjj
Out-of-bounds write in MediaTek chipset
Priority LOW 35
In geniezone, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67589 CVE-2026-20544 · GHSA-wx8c-gfpx-8wcw
Out-of-bounds write in MediaTek chipsets enables local escalation
Priority LOW 31
In meta, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67578 CVE-2026-20533 · GHSA-g76f-499r-45cc
Integer overflow in MediaTek display enables privilege escalation
Priority LOW 30
In display, there is a possible escalation of privilege due to an integer overflow.
TI-2026-67574 CVE-2026-20529 · GHSA-4564-cmp3-frpg
Out of bounds write in MediaTek chipset battery component
Priority LOW 30
In battery, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16596 CVE-2026-20453 · GHSA-xrxv-qpfw-72fv
Out-of-bounds write in MediaTek chipset
Priority LOW 30
In geniezone, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16597 CVE-2026-20454 · GHSA-fr72-6536-5mwp
Time-of-check time-of-use race condition in MediaTek chipset
Priority LOW 29
In geniezone, there is a possible out of bounds write due to a race condition.
TI-2025-14731 CVE-2025-20659 · GHSA-8359-6xxw-qm22
Out-of-bounds read in MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M…
Priority LOW 29
In Modem, there is a possible system crash due to improper input validation.
TI-2026-16592 CVE-2026-20449 · GHSA-hjqf-j9p4-gv29
Buffer overflow in MediaTek chipset
Priority LOW 28
In Modem, there is a possible system crash due to a heap buffer overflow.
TI-2026-67588 CVE-2026-20543 · GHSA-xph5-44g7-gggh
Information disclosure in MediaTek modem due to a logic error
Priority LOW 24
In Modem, there is a possible information disclosure due to a logic error.
TI-2026-67586 CVE-2026-20541 · GHSA-3hgh-w6pp-p4rg
Out of bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67585 CVE-2026-20540 · GHSA-qcwv-wm5j-jgj5
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67584 CVE-2026-20539 · GHSA-gx55-632p-3gpx
Out-of-bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67583 CVE-2026-20538 · GHSA-h6c4-mvxr-gf42
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67579 CVE-2026-20534 · GHSA-vv5q-53j2-fq73
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to an incorrect bounds check.
TI-2026-16627 CVE-2026-20484 · GHSA-mhh4-4rgh-x32m
In TFA, there is a possible information disclosure due to a missing permission check.
Priority LOW 20
In TFA, there is a possible information disclosure due to a missing permission check.