TI-2026-16622 CVE-2026-20479 · GHSA-6g35-p5gh-6qh4
Out-of-bounds read in MediaTek chipset
Priority MEDIUM 40
In Modem, there is a possible out of bounds read due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
26 records in Mt6890 Firmware · all components
TI-2026-16576 CVE-2026-20433 · GHSA-5h6h-2wjp-jc72
Out-of-bounds write in MediaTek chipset
Priority MEDIUM 40
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16595 CVE-2026-20452 · GHSA-mfvp-3qw7-v5gw
Heap-based buffer overflow in MediaTek chipset
Priority LOW 37
In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow.
TI-2026-16575 CVE-2026-20432 · GHSA-86mw-26q3-c8pr
Out-of-bounds write in MediaTek chipset
Priority LOW 37
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5
Out-of-bounds write in MediaTek modem could allow privilege escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v
Out-of-bounds write in MediaTek modem chipsets enables escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99
Out-of-bounds write in MediaTek modem chipsets
Priority LOW 33
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67573 CVE-2026-20528 · GHSA-4qxx-g536-wh52
Out of bounds write and read in MediaTek ccci component
Priority LOW 30
In ccci, there is a possible out of bounds write and read due to a missing bounds check.
TI-2026-16593 CVE-2026-20450 · GHSA-3xqj-wm42-c6c4
Reachable assertion in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to incorrect error handling.
TI-2025-14731 CVE-2025-20659 · GHSA-8359-6xxw-qm22
Out-of-bounds read in MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M…
Priority LOW 29
In Modem, there is a possible system crash due to improper input validation.
TI-2026-16592 CVE-2026-20449 · GHSA-hjqf-j9p4-gv29
Buffer overflow in MediaTek chipset
Priority LOW 28
In Modem, there is a possible system crash due to a heap buffer overflow.
TI-2026-67588 CVE-2026-20543 · GHSA-xph5-44g7-gggh
Information disclosure in MediaTek modem due to a logic error
Priority LOW 24
In Modem, there is a possible information disclosure due to a logic error.
TI-2026-16645 CVE-2026-20504 · GHSA-p2x2-q5j5-2mj9
Reachable assertion in MediaTek chipset
Priority LOW 24
In Modem, there is a possible system crash due to a missing bounds check.
TI-2026-16644 CVE-2026-20503 · GHSA-x74h-78mc-6jq7
Reachable assertion in MediaTek chipset
Priority LOW 24
In Modem, there is a possible system crash due to a missing bounds check.
TI-2026-16636 CVE-2026-20494 · GHSA-p939-jv8f-p7rc
Out-of-bounds read in MediaTek chipset
Priority LOW 24
In wifi, there is a possible out of bounds read due to a missing bounds check.
TI-2026-16634 CVE-2026-20492 · GHSA-vmmw-77gq-c2hq
Time-of-check time-of-use race condition in MediaTek chipset
Priority LOW 24
In Audio HAL, there is a possible system becoming unresponsive due to a race condition.
TI-2026-16633 CVE-2026-20491 · GHSA-639g-9ffj-23fc
Out-of-bounds write in MediaTek chipset
Priority LOW 24
In med, there is a possible out of bounds write due to an incorrect bounds check.
TI-2026-16623 CVE-2026-20480 · GHSA-9v43-w5wr-hc42
Heap-based buffer overflow in MediaTek chipset
Priority LOW 24
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-16621 CVE-2026-20478 · GHSA-36p8-6qw9-45qf
Out-of-bounds write in MediaTek chipset
Priority LOW 24
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-67586 CVE-2026-20541 · GHSA-3hgh-w6pp-p4rg
Out of bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67585 CVE-2026-20540 · GHSA-qcwv-wm5j-jgj5
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67584 CVE-2026-20539 · GHSA-gx55-632p-3gpx
Out-of-bounds read in MediaTek modem enables denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing bounds check.
TI-2026-67583 CVE-2026-20538 · GHSA-h6c4-mvxr-gf42
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to a missing permission check.
TI-2026-67579 CVE-2026-20534 · GHSA-vv5q-53j2-fq73
Out-of-bounds read in MediaTek modem enables remote denial of service
Priority LOW 23
In Modem, there is a possible out of bounds read due to an incorrect bounds check.
TI-2026-67572 CVE-2026-20527 · GHSA-4j3w-6745-4v34
Missing bounds check in MediaTek modem can crash the system
Priority LOW 23
In Modem, there is a possible system crash due to a missing bounds check.