MediaTek

Records1134All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical40CVSS 9.0–10.0

CVSS high230CVSS 7.0–8.9

Exploited now

MediaTek records in CISA KEV

TI-2020-00067 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability CRITICAL 93KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Software Development Kit 71 records HIGH Nr15 65 records MEDIUM Nr16 57 records MEDIUM Nr17 48 records MEDIUM Mt6991 Firmware 46 records MEDIUM Mt6993 Firmware 44 records LOW Mt8668 Firmware 44 records MEDIUM Mt8781 Firmware 42 records MEDIUM

Records

23 records in Mt6881 Firmware · all components

TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr

Heap-based buffer overflow in MediaTek chipset

LOW 38

In vdec, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00184 Published 2026-09-07 No fix listed CWE-122

TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p

Heap-based buffer overflow in MediaTek chipset

LOW 38

In vdec, there is a possible out of bounds write due to a heap buffer overflow.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00183 Published 2026-09-07 No fix listed CWE-122

TI-2026-67568 CVE-2026-20523 · GHSA-w3mq-56xp-m4pf

MediaTek neuropilot out-of-bounds write enables local escalation

LOW 37

In neuropilot, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00134 Published 2026-10-05 No fix listed CWE-787

TI-2026-67567 CVE-2026-20522 · GHSA-49pr-gv6j-5p2c

Out-of-bounds write in MediaTek neuropilot enables local escalation

LOW 37

In neuropilot, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00137 Published 2026-10-05 No fix listed CWE-787

TI-2026-67566 CVE-2026-20521 · GHSA-qpf3-2wfg-8hrm

Privilege escalation in MediaTek Video HAL from missing bounds check

LOW 37

In Video HAL, there is a possible escalation of privilege due to a missing bounds check.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00137 Published 2026-10-05 No fix listed CWE-121

TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5

Out-of-bounds write in MediaTek modem could allow privilege escalation

LOW 34

In Modem, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00228 Published 2026-10-05 No fix listed CWE-787

TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v

Out-of-bounds write in MediaTek modem chipsets enables escalation

LOW 34

In Modem, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00228 Published 2026-10-05 No fix listed CWE-787

TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99

Out-of-bounds write in MediaTek modem chipsets

LOW 33

In Modem, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00212 Published 2026-10-05 No fix listed CWE-787

TI-2026-67589 CVE-2026-20544 · GHSA-wx8c-gfpx-8wcw

Out-of-bounds write in MediaTek chipsets enables local escalation

LOW 31

In meta, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00166 Published 2026-10-05 No fix listed CWE-787

TI-2026-67582 CVE-2026-20537 · GHSA-wxg2-c3w6-g8xw

Use after free in MediaTek chipset aidl component corrupts memory

LOW 30

In aidl, there is a possible memory corruption due to use after free.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00114 Published 2026-10-05 No fix listed CWE-416

TI-2026-67581 CVE-2026-20536 · GHSA-pvjw-p28v-r2c2

Use after free in MediaTek chipset AIDL enables memory corruption

LOW 30

In aidl, there is a possible memory corruption due to use after free.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00114 Published 2026-10-05 No fix listed CWE-416

TI-2026-67580 CVE-2026-20535 · GHSA-8mmg-g9gw-84mh

Missing permission check in MediaTek chipsets allows local escalation

LOW 30

In aidl, there is a possible escalation of privilege due to a missing permission check.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00108 Published 2026-10-05 No fix listed CWE-862

TI-2026-67574 CVE-2026-20529 · GHSA-4564-cmp3-frpg

Out of bounds write in MediaTek chipset battery component

LOW 30

In battery, there is a possible out of bounds write due to a missing bounds check.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00114 Published 2026-10-05 No fix listed CWE-787

TI-2026-67588 CVE-2026-20543 · GHSA-xph5-44g7-gggh

Information disclosure in MediaTek modem due to a logic error

LOW 24

In Modem, there is a possible information disclosure due to a logic error.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-10-05 No fix listed CWE-215

TI-2026-16644 CVE-2026-20503 · GHSA-x74h-78mc-6jq7

Reachable assertion in MediaTek chipset

LOW 24

In Modem, there is a possible system crash due to a missing bounds check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00286 Published 2026-09-07 No fix listed CWE-617

TI-2026-67586 CVE-2026-20541 · GHSA-3hgh-w6pp-p4rg

Out of bounds read in MediaTek modem enables denial of service

LOW 23

In Modem, there is a possible out of bounds read due to a missing permission check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-126

TI-2026-67585 CVE-2026-20540 · GHSA-qcwv-wm5j-jgj5

Out-of-bounds read in MediaTek modem enables remote denial of service

LOW 23

In Modem, there is a possible out of bounds read due to a missing bounds check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-126

TI-2026-67584 CVE-2026-20539 · GHSA-gx55-632p-3gpx

Out-of-bounds read in MediaTek modem enables denial of service

LOW 23

In Modem, there is a possible out of bounds read due to a missing bounds check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-126

TI-2026-67583 CVE-2026-20538 · GHSA-h6c4-mvxr-gf42

Out-of-bounds read in MediaTek modem enables remote denial of service

LOW 23

In Modem, there is a possible out of bounds read due to a missing permission check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-126

TI-2026-67579 CVE-2026-20534 · GHSA-vv5q-53j2-fq73

Out-of-bounds read in MediaTek modem enables remote denial of service

LOW 23

In Modem, there is a possible out of bounds read due to an incorrect bounds check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00182 Published 2026-10-05 No fix listed CWE-125

TI-2026-67572 CVE-2026-20527 · GHSA-4j3w-6745-4v34

Missing bounds check in MediaTek modem can crash the system

LOW 23

In Modem, there is a possible system crash due to a missing bounds check.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00206 Published 2026-10-05 No fix listed CWE-129

TI-2026-67570 CVE-2026-20525 · GHSA-gr3f-92cw-g5f6

Modem crash from improper input validation in MediaTek chipsets

LOW 23

In Modem, there is a possible system crash due to improper input validation.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00206 Published 2026-10-05 No fix listed CWE-617

TI-2026-16641 CVE-2026-20500 · GHSA-3wwc-gvmj-fpx5

Improper certificate validation in MediaTek chipset

LOW 22

In Modem, there is a possible system crash due to improper input validation.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00124 Published 2026-09-07 No fix listed CWE-295

Open these records in search →