TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
44 records in Mt6993 Firmware · all components
TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-67576 CVE-2026-20531 · GHSA-f6jh-r28v-p526
Use after free in MediaTek apu component allows privilege escalation
Priority LOW 37
In apu, there is a possible memory corruption due to use after free.
TI-2026-67569 CVE-2026-20524 · GHSA-rwr8-hhc4-v5p9
Memory corruption in MediaTek apu lets local users escalate privileges
Priority LOW 37
In apu, there is a possible memory corruption due to improper input validation.
TI-2026-67568 CVE-2026-20523 · GHSA-w3mq-56xp-m4pf
MediaTek neuropilot out-of-bounds write enables local escalation
Priority LOW 37
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67567 CVE-2026-20522 · GHSA-49pr-gv6j-5p2c
Out-of-bounds write in MediaTek neuropilot enables local escalation
Priority LOW 37
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67566 CVE-2026-20521 · GHSA-qpf3-2wfg-8hrm
Privilege escalation in MediaTek Video HAL from missing bounds check
Priority LOW 37
In Video HAL, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16575 CVE-2026-20432 · GHSA-86mw-26q3-c8pr
Out-of-bounds write in MediaTek chipset
Priority LOW 37
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16626 CVE-2026-20483 · GHSA-gp8p-m3ww-5f47
Missing authorization in MediaTek chipset
Priority LOW 35
In Telephony, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5
Out-of-bounds write in MediaTek modem could allow privilege escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v
Out-of-bounds write in MediaTek modem chipsets enables escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99
Out-of-bounds write in MediaTek modem chipsets
Priority LOW 33
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67589 CVE-2026-20544 · GHSA-wx8c-gfpx-8wcw
Out-of-bounds write in MediaTek chipsets enables local escalation
Priority LOW 31
In meta, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16629 CVE-2026-20486 · GHSA-g7m9-j98f-r923
Improper check for unusual conditions in MediaTek chipset
Priority LOW 31
In imgsensor, there is a possible application crash due to incorrect error handling.
TI-2026-16591 CVE-2026-20448 · GHSA-wjg5-fw3x-2x8v
In geniezone, there is a possible escalation of privilege due to a missing permission…
Priority LOW 31
In geniezone, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67582 CVE-2026-20537 · GHSA-wxg2-c3w6-g8xw
Use after free in MediaTek chipset aidl component corrupts memory
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67581 CVE-2026-20536 · GHSA-pvjw-p28v-r2c2
Use after free in MediaTek chipset AIDL enables memory corruption
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67580 CVE-2026-20535 · GHSA-8mmg-g9gw-84mh
Missing permission check in MediaTek chipsets allows local escalation
Priority LOW 30
In aidl, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67578 CVE-2026-20533 · GHSA-g76f-499r-45cc
Integer overflow in MediaTek display enables privilege escalation
Priority LOW 30
In display, there is a possible escalation of privilege due to an integer overflow.
TI-2026-67575 CVE-2026-20530 · GHSA-7hfg-hgrm-p26m
Out-of-bounds write in MediaTek chipset display component
Priority LOW 30
In display, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67574 CVE-2026-20529 · GHSA-4564-cmp3-frpg
Out of bounds write in MediaTek chipset battery component
Priority LOW 30
In battery, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16590 CVE-2026-20447 · GHSA-5hp2-c33h-x595
Out-of-bounds read in MediaTek chipset
Priority LOW 30
In geniezone, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16593 CVE-2026-20450 · GHSA-3xqj-wm42-c6c4
Reachable assertion in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to incorrect error handling.
TI-2026-16574 CVE-2026-20431 · GHSA-6pq9-8556-qr3w
Resource allocation without limits in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to a logic error.
TI-2026-16628 CVE-2026-20485 · GHSA-8rj7-4f5c-p94f
Out-of-bounds write in MediaTek chipset
Priority LOW 28
In HFRP, there is a possible out of bounds write due to a missing bounds check.