TI-2026-16576 CVE-2026-20433 · GHSA-5h6h-2wjp-jc72
Out-of-bounds write in MediaTek chipset
Priority MEDIUM 40
In Modem, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
46 records in Mt6991 Firmware · all components
TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-67566 CVE-2026-20521 · GHSA-qpf3-2wfg-8hrm
Privilege escalation in MediaTek Video HAL from missing bounds check
Priority LOW 37
In Video HAL, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16575 CVE-2026-20432 · GHSA-86mw-26q3-c8pr
Out-of-bounds write in MediaTek chipset
Priority LOW 37
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16626 CVE-2026-20483 · GHSA-gp8p-m3ww-5f47
Missing authorization in MediaTek chipset
Priority LOW 35
In Telephony, there is a possible escalation of privilege due to a missing permission check.
TI-2026-16598 CVE-2026-20455 · GHSA-jf3x-c8h2-5gjj
Out-of-bounds write in MediaTek chipset
Priority LOW 35
In geniezone, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5
Out-of-bounds write in MediaTek modem could allow privilege escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v
Out-of-bounds write in MediaTek modem chipsets enables escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99
Out-of-bounds write in MediaTek modem chipsets
Priority LOW 33
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67589 CVE-2026-20544 · GHSA-wx8c-gfpx-8wcw
Out-of-bounds write in MediaTek chipsets enables local escalation
Priority LOW 31
In meta, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16629 CVE-2026-20486 · GHSA-g7m9-j98f-r923
Improper check for unusual conditions in MediaTek chipset
Priority LOW 31
In imgsensor, there is a possible application crash due to incorrect error handling.
TI-2026-16594 CVE-2026-20451 · GHSA-gx35-9jr2-9663
Type confusion in MediaTek chipset
Priority LOW 31
In slbc, there is a possible out of bounds write due to type confusion.
TI-2026-16591 CVE-2026-20448 · GHSA-wjg5-fw3x-2x8v
In geniezone, there is a possible escalation of privilege due to a missing permission…
Priority LOW 31
In geniezone, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67587 CVE-2026-20542 · GHSA-2v6f-cp2c-9f7v
Use after free in MediaTek apusys could allow local privilege escalation
Priority LOW 30
In apusys, there is a possible memory corruption due to use after free.
TI-2026-67582 CVE-2026-20537 · GHSA-wxg2-c3w6-g8xw
Use after free in MediaTek chipset aidl component corrupts memory
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67581 CVE-2026-20536 · GHSA-pvjw-p28v-r2c2
Use after free in MediaTek chipset AIDL enables memory corruption
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67580 CVE-2026-20535 · GHSA-8mmg-g9gw-84mh
Missing permission check in MediaTek chipsets allows local escalation
Priority LOW 30
In aidl, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67578 CVE-2026-20533 · GHSA-g76f-499r-45cc
Integer overflow in MediaTek display enables privilege escalation
Priority LOW 30
In display, there is a possible escalation of privilege due to an integer overflow.
TI-2026-67575 CVE-2026-20530 · GHSA-7hfg-hgrm-p26m
Out-of-bounds write in MediaTek chipset display component
Priority LOW 30
In display, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67574 CVE-2026-20529 · GHSA-4564-cmp3-frpg
Out of bounds write in MediaTek chipset battery component
Priority LOW 30
In battery, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16596 CVE-2026-20453 · GHSA-xrxv-qpfw-72fv
Out-of-bounds write in MediaTek chipset
Priority LOW 30
In geniezone, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16590 CVE-2026-20447 · GHSA-5hp2-c33h-x595
Out-of-bounds read in MediaTek chipset
Priority LOW 30
In geniezone, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16597 CVE-2026-20454 · GHSA-fr72-6536-5mwp
Time-of-check time-of-use race condition in MediaTek chipset
Priority LOW 29
In geniezone, there is a possible out of bounds write due to a race condition.
TI-2026-16593 CVE-2026-20450 · GHSA-3xqj-wm42-c6c4
Reachable assertion in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to incorrect error handling.