TI-2026-16577 CVE-2026-20434 · GHSA-q532-r27c-r7m9
Out-of-bounds write in MediaTek chipset
Priority LOW 34
In Modem, there is a possible out of bounds write due to a missing bounds check.
Vulnerabilities
17 records
TI-2025-14794 CVE-2025-20725 · GHSA-vh6r-gfvr-6mqr
Out-of-bounds write in MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M…
Priority MEDIUM 42
In ims service, there is a possible out of bounds write due to a missing bounds check.
TI-2025-14795 CVE-2025-20726 · GHSA-3fxq-vfm3-v9wf
Heap-based buffer overflow in MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D…
Priority MEDIUM 41
In Modem, there is a possible out of bounds write due to an incorrect bounds check.
TI-2025-14796 CVE-2025-20727 · GHSA-2fh7-g5h4-3598
Out-of-bounds write in MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, MT6762M…
Priority MEDIUM 44
In Modem, there is a possible out of bounds write due to a heap buffer overflow.
TI-2025-14749 CVE-2025-20678 · GHSA-fxp8-rw49-cf65
Uncontrolled recursion in MediaTek MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763…
Priority LOW 29
In ims service, there is a possible system crash due to incorrect error handling.
TI-2025-14739 CVE-2025-20667 · GHSA-fvh2-vvx7-2pjr
In Modem, there is a possible information disclosure due to incorrect error handling.
Priority LOW 33
In Modem, there is a possible information disclosure due to incorrect error handling.
TI-2024-13181 CVE-2024-20150 · GHSA-p22m-5prx-9rm7
Deserialization of untrusted data in MediaTek MT2735, MT2737, MT6767, MT6768, MT6769…
Priority MEDIUM 40
In Modem, there is a possible system crash due to a logic error.
TI-2024-13185 CVE-2024-20154 · GHSA-vvc3-x74m-rg8v
Stack-based buffer overflow in MediaTek MT2735, MT6767, MT6768, MT6769, MT6769K, MT6769S…
Priority MEDIUM 47
In Modem, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13108 CVE-2024-20076 · GHSA-xq6f-mgc4-8g5h
Memory corruption in MediaTek MT2731, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767…
Priority MEDIUM 40
In Modem, there is a possible system crash due to incorrect error handling.
TI-2024-13109 CVE-2024-20077 · GHSA-5rmp-w29x-xm84
Memory corruption in MediaTek MT2731, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767…
Priority MEDIUM 40
In Modem, there is a possible system crash due to incorrect error handling.
TI-2024-13074 CVE-2024-20039 · GHSA-v67q-hfx9-pxhf
Out-of-bounds write in MediaTek MT2731, MT2735, MT2737, MT3967, MT6297, MT6298, MT6739…
Priority MEDIUM 42
In modem protocol, there is a possible out of bounds write due to a missing bounds check.
TI-2023-16091 CVE-2023-32840 · GHSA-wxqm-9ppv-v25j
Out-of-bounds write in MediaTek MT2731, MT2735, MT6731, MT6739, MT6761, MT6762, MT6763…
Priority LOW 38
In modem CCCI, there is a possible out of bounds write due to a missing bounds check.
TI-2023-07238 CVE-2023-20819 · GHSA-j4jq-q994-j2wv
Out-of-bounds write in MediaTek MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737…
Priority MEDIUM 44
In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check.
TI-2022-09794 CVE-2022-26446 · GHSA-q5jj-rrmh-qqh6
Reachable assertion in MediaTek MT2731, MT2735, MT6297, MT6725, MT6739, MT6761, MT6762…
Priority MEDIUM 42
In Modem 4G RRC, there is a possible system crash due to improper input validation.
TI-2022-04665 CVE-2022-20083 · GHSA-w5h3-hfjg-f58j
Out-of-bounds write in MediaTek MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739…
Priority MEDIUM 47
In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check.
TI-2022-06117 CVE-2022-21744 · GHSA-x3q2-q8jj-f7gj
Out-of-bounds write in MediaTek MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739…
Priority MEDIUM 48
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check.
TI-2021-17332 CVE-2021-40148 · GHSA-qcmm-58xj-wh4r
In Modem EMM, there is a possible information disclosure due to a missing data encryption.
Priority LOW 34
In Modem EMM, there is a possible information disclosure due to a missing data encryption.