TI-2026-67591 CVE-2026-20586 · GHSA-32jv-4xgq-q975
Out-of-bounds write in MediaTek vdec enables privilege escalation
Priority MEDIUM 40
In vdec, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
44 records in Mt8668 Firmware · all components
TI-2026-16576 CVE-2026-20433 · GHSA-5h6h-2wjp-jc72
Out-of-bounds write in MediaTek chipset
Priority MEDIUM 40
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-67576 CVE-2026-20531 · GHSA-f6jh-r28v-p526
Use after free in MediaTek apu component allows privilege escalation
Priority LOW 37
In apu, there is a possible memory corruption due to use after free.
TI-2026-67569 CVE-2026-20524 · GHSA-rwr8-hhc4-v5p9
Memory corruption in MediaTek apu lets local users escalate privileges
Priority LOW 37
In apu, there is a possible memory corruption due to improper input validation.
TI-2026-67568 CVE-2026-20523 · GHSA-w3mq-56xp-m4pf
MediaTek neuropilot out-of-bounds write enables local escalation
Priority LOW 37
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67567 CVE-2026-20522 · GHSA-49pr-gv6j-5p2c
Out-of-bounds write in MediaTek neuropilot enables local escalation
Priority LOW 37
In neuropilot, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67566 CVE-2026-20521 · GHSA-qpf3-2wfg-8hrm
Privilege escalation in MediaTek Video HAL from missing bounds check
Priority LOW 37
In Video HAL, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16575 CVE-2026-20432 · GHSA-86mw-26q3-c8pr
Out-of-bounds write in MediaTek chipset
Priority LOW 37
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67565 CVE-2026-20520 · GHSA-w557-6g77-vqj5
Out-of-bounds write in MediaTek modem could allow privilege escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67564 CVE-2026-20519 · GHSA-gpjv-w5xg-gj9v
Out-of-bounds write in MediaTek modem chipsets enables escalation
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67571 CVE-2026-20526 · GHSA-rq5q-2w74-7p99
Out-of-bounds write in MediaTek modem chipsets
Priority LOW 33
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67589 CVE-2026-20544 · GHSA-wx8c-gfpx-8wcw
Out-of-bounds write in MediaTek chipsets enables local escalation
Priority LOW 31
In meta, there is a possible out of bounds write due to a missing bounds check.
TI-2026-67594 CVE-2026-20589 · GHSA-f92j-xqqj-522r
Out-of-bounds write in MediaTek venc allows local escalation
Priority LOW 30
In venc, there is a possible out of bounds write due to type confusion.
TI-2026-67593 CVE-2026-20588 · GHSA-xxc4-28wg-vmv2
Out-of-bounds write in MediaTek mtee enables privilege escalation
Priority LOW 30
In mtee, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-67592 CVE-2026-20587 · GHSA-v3qv-gj82-2cx5
Type confusion in MediaTek mtee allows local privilege escalation
Priority LOW 30
In mtee, there is a possible escalation of privilege due to type confusion.
TI-2026-67590 CVE-2026-20579 · GHSA-rrxq-gh8f-hf49
Out-of-bounds write in MediaTek vdec allows privilege escalation
Priority LOW 30
In vdec, there is a possible out of bounds write due to type confusion.
TI-2026-67582 CVE-2026-20537 · GHSA-wxg2-c3w6-g8xw
Use after free in MediaTek chipset aidl component corrupts memory
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67581 CVE-2026-20536 · GHSA-pvjw-p28v-r2c2
Use after free in MediaTek chipset AIDL enables memory corruption
Priority LOW 30
In aidl, there is a possible memory corruption due to use after free.
TI-2026-67580 CVE-2026-20535 · GHSA-8mmg-g9gw-84mh
Missing permission check in MediaTek chipsets allows local escalation
Priority LOW 30
In aidl, there is a possible escalation of privilege due to a missing permission check.
TI-2026-67578 CVE-2026-20533 · GHSA-g76f-499r-45cc
Integer overflow in MediaTek display enables privilege escalation
Priority LOW 30
In display, there is a possible escalation of privilege due to an integer overflow.
TI-2026-67575 CVE-2026-20530 · GHSA-7hfg-hgrm-p26m
Out-of-bounds write in MediaTek chipset display component
Priority LOW 30
In display, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16593 CVE-2026-20450 · GHSA-3xqj-wm42-c6c4
Reachable assertion in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to incorrect error handling.
TI-2026-16574 CVE-2026-20431 · GHSA-6pq9-8556-qr3w
Resource allocation without limits in MediaTek chipset
Priority LOW 29
In Modem, there is a possible system crash due to a logic error.