TI-2025-38056 CVE-2025-61611 · GHSA-4j8h-9q93-mc4m
Improper input validation in Google UDX710
Priority MEDIUM 40
In modem, there is a possible improper input validation.
Vulnerabilities
114 records
TI-2026-16578 CVE-2026-20435 · GHSA-2727-h6mf-8pqp
Insufficiently protected credentials in MediaTek chipset
Priority LOW 20
In preloader, there is a possible read of device unique identifiers due to a logic error.
TI-2025-14834 CVE-2025-20765 · GHSA-vg9c-mrp6-2mh9
Race condition in MediaTek MT2718, MT2737, MT6739, MT6761, MT6765, MT6768, MT6781…
Priority LOW 20
In aee daemon, there is a possible system crash due to a race condition.
TI-2025-14816 CVE-2025-20747 · GHSA-xc4v-px56-ffcm
Stack-based buffer overflow in MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897…
Priority LOW 30
In gnss service, there is a possible out of bounds write due to an incorrect bounds check.
TI-2025-14815 CVE-2025-20746 · GHSA-4qwc-hr6c-mgjj
Stack-based buffer overflow in MediaTek MT2718, MT2737, MT6835, MT6878, MT6886, MT6897…
Priority LOW 30
In gnss service, there is a possible out of bounds write due to an incorrect bounds check.
TI-2025-14799 CVE-2025-20730 · GHSA-ghx5-r834-wpjq
Improper authentication in MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6781…
Priority LOW 30
In preloader, there is a possible escalation of privilege due to an insecure default value.
TI-2025-14774 CVE-2025-20705 · GHSA-8q38-g4mm-hvf4
Use after free in MediaTek MT2718, MT2735, MT6739, MT6761, MT6765, MT6768, MT6781…
Priority LOW 35
In monitor_hang, there is a possible memory corruption due to use after free.
TI-2025-14766 CVE-2025-20696 · GHSA-5h33-6pvx-h384
Out-of-bounds write in MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6813…
Priority LOW 31
In DA, there is a possible out of bounds write due to a missing bounds check.
TI-2025-14763 CVE-2025-20693 · GHSA-64hp-f4h4-phx9
Out-of-bounds read in MediaTek MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT6985…
Priority LOW 28
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check.
TI-2025-14728 CVE-2025-20656 · GHSA-6vqr-8xjq-ghqg
Out-of-bounds write in MediaTek MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6886…
Priority LOW 31
In DA, there is a possible out of bounds write due to a missing bounds check.
TI-2025-14723 CVE-2025-20651 · GHSA-f56w-wc87-frcc
Out-of-bounds read in MediaTek MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879…
Priority LOW 18
In da, there is a possible out of bounds read due to a missing bounds check.
TI-2025-14722 CVE-2025-20650 · GHSA-9926-q228-4mpp
Out-of-bounds write in MediaTek MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879…
Priority LOW 31
In da, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13178 CVE-2024-20147 · GHSA-82mr-cw9v-6p8w
Reachable assertion in MediaTek MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6985…
Priority LOW 23
In Bluetooth FW, there is a possible reachable assertion due to improper exception handling.
TI-2025-14707 CVE-2025-20635 · GHSA-c6pf-22fc-fhr3
Out-of-bounds write in MediaTek MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879…
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13184 CVE-2024-20153 · GHSA-2h9f-xm25-q379
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed…
Priority LOW 39
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID.
TI-2024-13183 CVE-2024-20152 · GHSA-88jr-vqf8-xrxx
Reachable assertion in MediaTek MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990…
Priority LOW 19
In wlan STA driver, there is a possible reachable assertion due to improper exception handling.
TI-2024-13179 CVE-2024-20148 · GHSA-cqhv-985j-2frf
Out-of-bounds write in MediaTek MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920…
Priority MEDIUM 42
In wlan STA FW, there is a possible out of bounds write due to improper input validation.
TI-2024-13177 CVE-2024-20146 · GHSA-fvq7-q423-52g3
Out-of-bounds write in MediaTek MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990…
Priority LOW 36
In wlan STA driver, there is a possible out of bounds write due to improper input validation.
TI-2024-13176 CVE-2024-20145 · GHSA-98mp-fxmm-38qm
Out-of-bounds write in MediaTek MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879…
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13175 CVE-2024-20144 · GHSA-w82h-8c9g-f268
Out-of-bounds write in MediaTek MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779…
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13174 CVE-2024-20143 · GHSA-pch9-mchm-3m6c
Out-of-bounds write in MediaTek MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879…
Priority LOW 30
In V6 DA, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13171 CVE-2024-20140 · GHSA-pvvw-qrf9-xpmc
Out-of-bounds write in MediaTek MT6739, MT6761, MT6768, MT6781, MT6833, MT6853, MT6877…
Priority LOW 30
In power, there is a possible out of bounds write due to a missing bounds check.
TI-2024-13170 CVE-2024-20139 · GHSA-mgww-wpg8-7gmj
Reachable assertion in MediaTek MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927…
Priority LOW 28
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions.
TI-2024-13139 CVE-2024-20107 · GHSA-m62c-rp67-pw2c
Out-of-bounds read in MediaTek MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880…
Priority LOW 26
In da, there is a possible out of bounds read due to a missing bounds check.
TI-2024-13136 CVE-2024-20104 · GHSA-79m4-m83j-wqr4
Out-of-bounds write in MediaTek MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880…
Priority LOW 37
In da, there is a possible out of bounds write due to a missing bounds check.