MediaTek, Inc.

Products

Exploited and recent CVEs

• CVE-2026-68591 Medium 6.7 In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege 0.1%
• CVE-2026-68590 Medium 5.3 In ip_stack, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attac 0.2%
• CVE-2026-68589 Medium 6.7 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User i 0.1%
• CVE-2026-68588 Medium 5.3 In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20600 Medium 5.3 In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no add 0.2%
• CVE-2026-20599 Medium 6.7 In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege 0.1%
• CVE-2026-20598 Medium 5.3 In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with 0.2%
• CVE-2026-20597 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20596 Medium 5.3 In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker 0.2%
• CVE-2026-20595 Medium 6.7 In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. U 0.1%
• CVE-2026-20594 Medium 5.3 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w 0.2%
• CVE-2026-20593 Medium 5.3 In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, 0.2%
• CVE-2026-20592 Medium 4.1 In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to local information disclosure if a malicious actor has already obtained the System pr <0.1%
• CVE-2026-20591 High 8.4 In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera 0.1%
• CVE-2026-20590 Medium 4.4 In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not ne 0.1%
• CVE-2026-20585 High 7.5 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the atta 0.2%
• CVE-2026-20584 Medium 6.7 In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User inter 0.1%
• CVE-2026-20583 Medium 4.4 In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not neede 0.1%
• CVE-2026-20582 Medium 6.7 In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is n 0.1%
• CVE-2026-20581 Medium 6.7 In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20580 Medium 4.4 In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not neede 0.1%
• CVE-2026-20578 Medium 5.3 In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b 0.2%
• CVE-2026-20577 Medium 4.4 In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction 0.1%
• CVE-2026-20576 Medium 6.7 In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User int 0.1%
• CVE-2026-20575 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20574 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20573 Medium 6.7 In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is n 0.1%
• CVE-2026-20572 Medium 6.7 In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User inter 0.1%
• CVE-2026-20571 Medium 6.7 In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction i 0.1%
• CVE-2026-20570 Medium 6.7 In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User intera 0.1%